Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
File: 57b964c4-07ca-4501-bd01-5cb8936846cc.roa (raw, json)
Hash identifier: rQTDk7QUya8QX4IIPQ4rFw1S2VBkC/xlHcT1QgpJ8ys=
Subject key identifier: 3F:6A:A1:CF:2A:D0:CF:9D:BA:FC:E6:D7:EC:28:56:8C:7C:E7:E2:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29F19D9B9D4CF89EBDE82318B212B76B3A80C37A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
Signing time: Sat 08 Mar 2025 00:30:58 +0000
ROA not before: Sat 08 Mar 2025 00:30:58 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f1:9d:9b:9d:4c:f8:9e:bd:e8:23:18:b2:12:b7:6b:3a:80:c3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 8 00:30:58 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:da:c3:99:38:18:3b:17:ce:35:72:a8:69:
56:5b:69:dd:b5:2e:68:6e:d5:90:7f:08:50:69:20:
bb:b4:db:13:b0:a5:33:e5:ae:25:88:1b:18:8a:e9:
65:77:98:45:1d:00:a4:29:bb:e7:51:39:16:d8:b7:
b2:d7:2d:60:e9:f8:a4:0e:6f:0d:13:46:55:5e:37:
ab:bb:0e:ec:49:88:de:0f:ad:1f:22:db:3d:ba:bb:
f4:cf:96:7d:d7:d9:30:06:4b:e8:fd:b7:ef:4e:98:
bb:77:16:aa:6b:24:96:f2:f7:c1:2c:58:26:f4:fd:
7c:46:19:39:e6:8e:a2:f6:e9:1d:33:f7:1a:e6:6c:
6c:36:3b:97:f5:9b:3d:f3:15:4f:c0:08:37:a7:f0:
2b:8d:a2:e6:6f:73:a0:92:e0:7e:62:6f:7c:c4:e6:
16:ae:dd:aa:ea:b2:52:4b:ec:41:16:c0:33:3e:1d:
d4:4c:32:55:68:65:c5:cf:6a:7d:72:9a:e2:d2:9f:
71:ec:b6:e3:39:c8:e6:dc:8f:08:8a:bb:31:69:ad:
c0:c8:9b:94:23:03:ad:8e:bc:78:7d:80:00:6a:ec:
64:32:90:3c:ff:16:bf:3e:bc:6d:25:3e:bd:16:eb:
9c:4c:fe:9a:cc:02:28:19:b6:bb:7a:55:22:bc:aa:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:A1:CF:2A:D0:CF:9D:BA:FC:E6:D7:EC:28:56:8C:7C:E7:E2:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
3a:11:d4:6a:1d:d0:3f:9c:4f:13:3f:3f:6a:4d:65:4e:79:03:
78:d6:2f:50:cc:3a:40:8e:3d:50:e4:b6:07:fb:74:d3:20:f9:
2c:0e:91:c7:60:56:89:54:87:59:01:dc:ed:96:93:d8:ce:6d:
82:f1:e9:81:a8:40:e0:27:1c:75:be:6d:3e:9a:aa:e8:90:ac:
dc:be:7f:b3:3e:2c:12:6a:22:97:88:61:bc:8c:61:cd:0f:92:
36:8a:ba:2f:0a:fe:44:41:96:d0:ca:07:d8:81:b1:33:e5:49:
7e:aa:f7:e8:8e:af:4c:3a:57:2f:7f:58:54:73:e3:24:a2:6d:
fc:65:78:d8:18:b8:ad:ee:49:29:25:a9:d5:1b:33:64:6c:25:
99:12:a4:ea:9a:2f:56:c3:05:98:b7:01:73:5f:46:84:49:73:
5d:93:a6:0f:a9:f8:3b:19:5c:75:bc:f6:54:60:3a:b0:6d:ae:
a4:b7:6e:37:54:76:cd:37:df:5d:57:96:43:4e:75:26:06:3e:
35:a8:33:fb:aa:6d:fa:db:b9:83:84:fe:3d:12:b2:5d:34:46:
16:76:fd:0b:8a:c3:38:e6:0e:ac:5f:b3:20:5d:03:5b:bc:e8:
d1:3e:45:3a:54:0c:38:eb:2f:a3:ef:26:16:3c:37:7b:d0:a6:
75:bc:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:23:41 2025 by rpki-client