Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
File: 5acd35f8-42dc-4211-8060-407321cbd4dd.roa (raw, json)
Hash identifier: Rls3ilyJr0ZVXTbEFuKYRWonWDSF3utdmxANA7plW2I=
Subject key identifier: 03:14:6D:D2:CD:BA:20:30:38:76:8D:64:D3:2B:71:D6:44:36:B7:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D744B7F52C05296A5ACFC8FC39D327060A0F560
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
Signing time: Mon 31 Mar 2025 20:20:57 +0000
ROA not before: Mon 31 Mar 2025 20:20:57 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:74:4b:7f:52:c0:52:96:a5:ac:fc:8f:c3:9d:32:70:60:a0:f5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:20:57 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=c2796a448c5e267ef60a9ab8679a88240734e90f2e897d460f227a5ea2da5cc4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:71:2b:09:48:f9:fa:b3:de:2a:8a:1f:2a:
d6:77:0b:65:66:99:46:11:26:97:94:b2:d4:32:2c:
05:4a:47:4a:e2:56:e2:34:b1:7d:73:55:67:91:fe:
10:2e:33:1d:77:ef:1e:da:44:d2:6b:93:c5:f7:38:
2b:e4:0c:7b:7e:17:ad:90:ac:f7:c2:cd:5e:a9:e2:
d8:c5:c8:a1:f6:f3:c1:9f:95:a5:d3:2a:9f:01:aa:
46:08:34:5b:f3:70:5c:9c:f5:0f:c0:b7:26:79:8e:
ce:f9:13:a6:3e:b5:33:7b:9d:45:1e:f8:92:5b:16:
3e:3d:37:fd:2d:cd:b0:4a:6d:06:24:3a:2b:b4:67:
35:ff:61:b1:43:df:9e:84:73:0e:58:2f:8a:65:a6:
13:cf:e2:90:fe:ed:c4:70:d0:7f:90:b5:6e:80:29:
74:cf:19:72:4b:04:9d:07:41:06:e4:eb:13:c5:76:
1e:c5:cf:fc:b8:50:4c:55:9e:b5:8f:6e:2b:15:96:
e6:af:68:e3:31:cd:61:0b:f1:bf:76:52:1b:dc:87:
f8:b7:33:3b:c7:58:33:8b:fb:e7:e1:99:e5:17:1a:
9b:a2:e1:ec:19:9a:17:e9:b5:18:bb:00:ce:90:fa:
75:c7:db:6f:a6:c3:6e:33:a1:a2:fb:d3:25:cb:a0:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:14:6D:D2:CD:BA:20:30:38:76:8D:64:D3:2B:71:D6:44:36:B7:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6040::/46
Signature Algorithm: sha256WithRSAEncryption
c9:34:99:6b:00:77:67:02:78:d4:e4:b1:2a:29:36:fe:2a:e4:
7f:2c:fc:1b:58:6a:67:b8:8d:dc:90:08:1b:02:f2:3a:d5:0e:
e7:67:d9:d5:b6:39:96:25:fe:bf:63:89:10:7d:62:4c:3f:bf:
d1:f9:83:1d:a6:1c:09:24:d9:60:3d:66:6a:f1:9e:b3:70:01:
bd:4c:ad:72:fc:a5:a5:a4:78:e4:3d:b7:c1:9a:13:c2:f8:94:
c5:2e:76:57:ca:c6:51:59:8c:aa:67:8b:00:72:fb:92:a4:de:
4b:56:40:46:b4:ee:c2:eb:dd:e7:db:71:7d:8e:ab:03:94:e5:
3e:c5:ca:1e:d1:71:08:2e:17:bb:6e:e5:70:d8:a5:d9:ae:71:
fb:04:82:6d:3d:58:28:8a:5c:e0:34:c2:42:82:be:e3:b3:06:
47:75:13:3f:d4:fc:fd:d4:12:8a:67:80:dc:05:3f:e2:f0:42:
51:a4:81:91:60:f5:90:61:0c:9f:43:f7:90:cf:78:ef:bc:b9:
d2:e6:be:98:73:54:1d:cd:00:7b:1b:b3:9c:90:2c:e7:e9:0c:
6b:ba:75:a5:13:4c:83:42:ac:7a:b0:b6:71:56:04:70:da:8d:
b4:64:77:ad:b4:a1:59:09:31:55:cd:de:4c:35:ec:40:b9:26:
c0:0b:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:12 2025 by rpki-client on console.sobornost.net