Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6aec084-593c-47be-8e46-9024b5572011.roa
File: f6aec084-593c-47be-8e46-9024b5572011.roa (raw, json)
Hash identifier: aETiM9vIs/z67qpRQr2cvEob+hChdiOlMv98uOn6yNM=
Subject key identifier: 31:B8:AB:04:3A:32:F1:E6:81:A2:50:DB:3A:24:CC:44:57:B5:A8:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26D1AB25BC3BBDC99AEB6D1DF9336D6B86F5C8FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6aec084-593c-47be-8e46-9024b5572011.roa
Signing time: Fri 21 Mar 2025 15:10:16 +0000
ROA not before: Fri 21 Mar 2025 15:10:16 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d1:ab:25:bc:3b:bd:c9:9a:eb:6d:1d:f9:33:6d:6b:86:f5:c8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:10:16 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:96:88:4b:07:b3:6f:98:20:5f:7c:d7:fb:
a2:06:30:e5:f1:64:29:38:45:e0:b2:ed:b0:75:e7:
21:41:d7:08:b9:2c:a9:78:fb:be:3f:1b:86:ba:4a:
d8:10:cf:3b:51:75:82:ac:22:0e:24:c5:93:0f:9c:
08:ce:24:8e:8d:be:16:e7:c6:bf:4e:2f:53:0b:d9:
b8:e6:38:b3:61:fd:17:91:7f:a4:72:06:f1:8f:de:
e2:7c:6f:bd:a1:65:4c:04:0b:5a:f5:7e:1f:6b:97:
be:73:56:24:fa:e1:98:16:ef:25:59:3a:e6:42:9e:
b3:27:47:09:89:9e:ca:64:ae:7c:f7:83:3c:2d:56:
22:74:40:94:8c:ff:9a:6d:94:6e:a5:46:ca:2f:07:
e8:7f:e1:a0:e1:df:cc:5a:a7:5e:2a:46:d0:6f:1f:
36:56:c1:a3:ff:f0:ed:df:95:90:e8:97:b0:b7:38:
ab:0e:39:a1:94:c5:2f:bf:97:c2:6f:2d:12:99:47:
5a:a1:10:64:df:a7:26:03:bf:6e:a9:4e:ed:f9:0c:
91:03:81:66:82:bd:36:0f:13:82:fa:60:0d:2e:15:
ff:52:eb:ad:a5:71:d2:09:8b:a1:5e:32:ba:6c:d0:
08:f4:73:2e:7d:fb:ee:2b:62:fa:fe:23:7d:78:c4:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:AB:04:3A:32:F1:E6:81:A2:50:DB:3A:24:CC:44:57:B5:A8:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6aec084-593c-47be-8e46-9024b5572011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:b4:33:d9:24:3d:1d:1d:d7:18:84:10:d5:37:62:b4:18:15:
47:61:18:49:cc:81:16:e9:96:d4:fd:72:74:06:69:e3:79:d4:
e1:89:b9:d1:6e:e2:5a:27:0c:a4:22:b9:fa:c9:e4:b3:7d:84:
f4:a1:2e:3d:d7:1c:26:7e:09:6f:94:f0:93:c1:2a:b2:94:fe:
27:3b:e3:28:71:08:b9:74:3e:09:b9:fa:73:85:5c:fc:92:99:
b8:cb:66:58:f5:bf:33:f9:66:9f:5d:e5:8b:d0:7d:51:e2:9f:
a9:21:7f:bb:28:f1:48:d3:49:f2:83:06:4d:d6:17:ae:83:b3:
ea:20:7f:29:16:70:d8:e2:87:0a:5d:ba:24:bf:f0:3f:8e:f1:
18:ad:6c:72:19:8f:17:4a:a7:26:3f:1f:33:d1:24:c3:60:b0:
3a:82:95:26:78:9f:19:3b:53:7f:c3:be:8d:98:4f:0f:86:cf:
a4:62:79:d5:e7:3d:3f:d8:97:d9:04:1c:0c:f5:78:56:2f:ac:
ea:bd:6f:f9:1c:49:9f:1b:67:10:be:86:55:36:b6:f5:83:a9:
56:67:e7:14:a7:6d:dc:69:e9:9d:16:81:5c:3f:22:2a:28:78:
6f:25:f7:06:8a:0e:a9:37:2c:ee:c4:54:b7:d2:49:0f:9d:2d:
12:55:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:07 2025 by rpki-client