Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
File: e234d9fb-5639-4264-99c1-35b39c1e56b5.roa (raw, json)
Hash identifier: CMGlm/8BGhnzgQk0CH1sA9ZFzmL0V17haxJbcsptdsc=
Subject key identifier: 20:C3:51:D3:ED:F2:F0:DD:4C:97:BC:A9:09:B3:03:03:9C:23:BF:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 75A3A16DAC11B7692448254CBC54C8CEDDDCE2B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
Signing time: Sat 08 Mar 2025 00:30:31 +0000
ROA not before: Sat 08 Mar 2025 00:30:31 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a3:a1:6d:ac:11:b7:69:24:48:25:4c:bc:54:c8:ce:dd:dc:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 8 00:30:31 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:8d:47:a2:0e:82:7f:95:a2:66:af:7b:a8:
6d:d8:46:e0:9e:28:d6:88:de:f7:50:b0:c1:a5:02:
de:3e:49:ec:33:1c:4a:0e:4d:d3:a6:ba:51:3f:99:
84:12:54:22:a5:3b:d3:f3:24:3c:aa:e4:fd:1a:6d:
e8:2b:37:55:fa:22:16:e3:82:de:5a:48:c6:c7:dd:
23:17:5d:24:3b:79:67:a0:a0:33:ec:82:dc:cb:99:
4d:f0:55:4b:87:41:9e:4a:f6:40:11:05:83:ba:6a:
8d:46:a2:29:ab:03:be:82:be:dc:a5:03:ba:6d:1a:
69:f7:4d:86:5c:62:67:dd:6f:14:1b:90:dd:aa:70:
d8:25:a0:29:68:d2:9c:72:d8:83:57:49:51:ce:fa:
7f:09:9d:73:01:7a:50:22:c3:c6:28:29:82:4e:77:
b1:15:91:7e:8b:20:27:fd:21:df:9d:ee:d6:64:6c:
c5:f4:c7:1f:10:ae:7e:91:95:a5:57:81:20:ba:72:
67:7e:3a:b9:6f:99:62:48:0d:54:d8:9d:17:99:d0:
ac:41:aa:4c:cf:e7:bf:6d:c1:60:05:19:db:b7:fd:
7e:7f:35:05:22:4b:30:c0:cc:63:cd:9d:b4:f9:6f:
7a:12:a1:aa:64:b8:3c:7b:05:00:1b:9c:f0:1e:8e:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:51:D3:ED:F2:F0:DD:4C:97:BC:A9:09:B3:03:03:9C:23:BF:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
52:93:d3:49:5f:26:c3:fd:95:7b:59:2d:9e:ed:a1:fe:1c:17:
c2:70:1f:16:35:64:bf:52:b6:e6:b2:af:26:05:6e:51:86:87:
d1:06:2a:13:40:0a:8c:ac:bd:f3:e8:61:06:73:d0:5a:f2:2f:
5f:18:ad:f8:8f:3b:d9:e8:1c:7b:1d:34:13:74:c5:a0:a3:45:
e6:23:97:50:75:5c:3b:f7:be:26:73:73:a7:bb:30:19:7c:ad:
39:ca:d4:45:1a:94:b6:81:df:98:bc:78:3f:2f:d4:b3:40:d9:
d4:86:8e:b9:73:0d:88:82:d0:d4:21:bf:36:9e:86:2b:a9:d1:
5f:8c:93:8b:1d:db:b2:1b:03:ee:3a:b9:6b:da:b4:97:f4:f8:
0c:b6:6f:e1:50:42:cd:6b:bd:59:8e:b1:64:86:7c:35:20:69:
f3:86:0e:2f:c4:b7:4b:c8:0f:49:3d:39:c3:7f:8f:d6:c4:64:
42:84:35:18:51:4d:e0:1e:a7:94:a7:92:f7:58:3e:ae:5d:89:
a8:5b:89:5e:56:ec:dc:0b:35:7f:51:03:b5:60:7f:03:3f:a6:
2d:59:1e:59:b0:30:30:01:93:d2:dd:01:49:73:72:9c:fd:8b:
23:be:ec:4f:f9:b5:bc:7d:c0:98:81:4b:32:10:43:2f:57:08:
2b:e6:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:21:36 2025 by rpki-client