Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9b7f141-37c5-41bb-af51-7e778b1a9376.roa
File: f9b7f141-37c5-41bb-af51-7e778b1a9376.roa (raw, json)
Hash identifier: BaLyFQi5+ECKdnTqgTxk9qCr5s5KWNeHnoEelpCH/js=
Subject key identifier: C2:9B:45:65:09:27:2D:6E:83:C5:01:E2:27:54:95:8E:24:13:5A:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38DC38488B0067D52AE553F308A7469C6E042B98
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9b7f141-37c5-41bb-af51-7e778b1a9376.roa
Signing time: Wed 05 Mar 2025 17:41:45 +0000
ROA not before: Wed 05 Mar 2025 17:41:45 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:dc:38:48:8b:00:67:d5:2a:e5:53:f3:08:a7:46:9c:6e:04:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:41:45 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:9a:29:93:40:ca:c0:82:4f:8f:d7:f1:74:
d1:94:08:1b:fb:55:60:5a:0e:00:ce:6b:46:00:f1:
f6:ba:ab:3f:fe:9e:28:22:7f:72:41:81:38:66:76:
36:b1:49:e4:93:03:83:4d:f2:88:92:58:f5:37:6a:
16:0c:3d:b2:40:00:33:21:52:b2:09:76:c4:ce:61:
7f:27:16:c4:b1:09:ff:89:d6:50:2e:b3:bc:45:ac:
0a:74:b5:ef:f6:b8:f1:77:4a:f8:dc:66:b4:3d:ae:
44:b7:ab:81:1f:43:55:07:ce:66:ad:64:51:06:be:
86:bb:d6:a9:7c:67:00:c7:58:0f:67:47:bc:9d:e3:
36:16:f7:f6:67:16:d7:bd:db:17:c8:24:9e:f7:ce:
c5:8c:8d:12:41:5e:dc:14:e9:3e:31:4a:83:6c:ae:
66:52:d4:ba:6c:f3:ab:36:4c:a3:c5:87:0d:4d:37:
f3:ec:f5:90:28:24:4e:81:0e:31:ec:93:7b:26:76:
f2:b5:59:e9:54:9e:0f:f5:92:4e:70:c1:45:bb:2f:
d8:3c:de:e2:f3:06:4b:33:b7:1a:46:89:c9:9a:e9:
70:db:7d:7a:de:1d:5f:e1:e4:38:84:f4:54:f8:85:
dd:1b:c8:1f:7d:64:3a:06:47:0d:2a:c1:42:28:90:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:45:65:09:27:2D:6E:83:C5:01:E2:27:54:95:8E:24:13:5A:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9b7f141-37c5-41bb-af51-7e778b1a9376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:c2:24:f1:88:40:63:bc:e3:bc:3d:de:8e:98:b7:18:fb:8e:
31:ee:03:8b:d9:2d:d9:96:5e:b1:cf:8c:45:b2:dc:35:8e:db:
68:bf:70:26:97:16:70:61:58:40:d0:62:09:5f:a4:13:27:b3:
ba:1a:dd:47:41:d4:9a:71:b8:af:43:f3:9b:ab:36:6f:a2:89:
b0:60:6c:5a:e2:4e:b3:63:c3:9d:d6:1e:9e:95:16:bc:0a:d9:
ef:4c:7d:4d:01:c7:41:b0:9a:ba:89:89:1b:e4:36:cc:9c:e4:
f3:4e:d9:16:8b:68:e9:a7:bf:0e:76:7e:c9:7f:a2:c8:09:37:
be:0f:83:80:5f:9b:c7:1e:8a:c8:02:56:d0:3c:f6:34:72:24:
52:61:a9:ff:15:66:48:45:89:ef:c1:f7:a5:dd:2a:7e:3e:1e:
a8:dd:49:df:90:ca:31:4e:19:fb:a5:ef:7c:26:2b:5a:9b:6e:
99:20:55:a6:63:6c:65:5c:78:f3:66:f0:03:35:c9:58:01:e6:
3b:6b:1a:44:cb:64:41:ba:3b:20:37:8c:ce:31:05:53:24:28:
67:3c:0c:1f:ff:38:37:19:55:c2:be:ef:e2:9f:3a:8d:8f:f6:
cd:3a:34:38:90:86:2a:17:f4:75:78:30:22:ef:59:ca:d0:8d:
9a:8b:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:18 2025 by rpki-client