Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
File: 002c315b-3412-464e-b865-645f657f136d.roa (raw, json)
Hash identifier: U1sDie2saU+RzSGwAeDS9XLIe6/rSkUz1EQioo1tg7c=
Subject key identifier: 27:E6:E7:C0:8E:D1:42:67:06:68:5C:F4:7A:CC:78:FC:24:35:ED:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E2B86160522F8640060DE858CD9BA0DE01E5BC5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2b:86:16:05:22:f8:64:00:60:de:85:8c:d9:ba:0d:e0:1e:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=3ec3849702d853c823d2667af9ea3c0a762d7116666f8422c368dca51a42a2e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:ea:2a:69:e8:3e:09:d4:b5:ff:42:48:f3:
66:e3:80:31:be:99:20:6a:ab:b5:c1:aa:6e:ce:5b:
52:ca:ae:25:0c:a0:ba:9a:eb:04:a4:a4:32:e2:6c:
89:8f:af:b2:b8:6a:50:75:f5:87:6f:c9:b6:4b:93:
7a:a7:c3:e8:d0:22:1d:6f:3a:9b:4c:a6:30:38:07:
2e:27:26:82:1c:cb:76:97:f8:68:86:80:02:82:ae:
88:b2:1d:0a:43:3e:d7:68:6a:2e:dd:b4:aa:42:e2:
a9:1b:8d:7a:92:66:10:13:b9:c0:5f:81:b5:87:34:
95:f2:c3:26:bb:e7:05:76:46:a8:86:54:79:07:78:
6a:d3:3c:a7:23:a9:07:62:3a:8f:72:24:9d:92:60:
f8:d5:7e:dd:8c:8d:bb:4f:20:29:b6:29:22:dd:8a:
5a:63:d3:96:a8:aa:59:26:90:75:17:c9:24:26:51:
5a:2f:a0:7f:43:20:3c:0d:b0:7f:32:6b:53:18:bc:
31:da:d9:14:f0:d6:d9:34:d7:da:59:0b:e6:9b:37:
d5:5b:79:5f:a9:c3:1d:19:01:00:30:9a:b9:7f:ac:
11:61:46:53:e3:d0:ec:1d:ed:8b:6b:7b:10:51:46:
71:e8:79:97:c1:bc:ba:1f:bc:7f:71:10:77:94:8c:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:E7:C0:8E:D1:42:67:06:68:5C:F4:7A:CC:78:FC:24:35:ED:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079::/32
Signature Algorithm: sha256WithRSAEncryption
3d:a2:6a:d8:61:a3:3f:fb:b0:47:b2:6a:cd:51:0f:c1:29:db:
82:5f:dc:85:80:b4:ef:a1:2d:46:ef:6e:d3:9f:03:38:d6:13:
9b:4e:b0:0a:f6:99:94:c1:f7:79:26:86:24:fc:28:45:f3:bc:
11:1a:c7:91:05:1a:d5:1d:3e:cc:06:05:27:7f:ba:51:e3:37:
c4:f3:1f:bc:f6:32:9d:bb:b4:15:65:bf:3b:01:30:69:95:80:
14:0e:4c:68:62:0b:c5:fb:c7:9f:5b:12:34:94:85:da:be:44:
61:f1:b1:1b:35:ca:49:90:3e:01:58:48:5e:2f:94:b0:52:7e:
1e:fe:7b:ea:cb:2f:30:ae:93:be:f3:94:47:6e:30:7b:ec:df:
38:8c:5b:d3:d3:08:0d:71:34:13:c5:32:98:5f:95:1c:4d:03:
49:c8:57:b2:53:5d:38:a9:ab:c4:a2:06:76:a7:d6:2d:78:c4:
a1:5d:f9:8e:69:0e:a0:e1:b0:08:dc:68:33:5e:12:c5:2b:6d:
31:c6:86:b5:2b:73:2b:3c:54:cc:96:fd:2f:f2:2d:72:c0:20:
63:d0:26:a6:95:07:c2:6f:e6:60:8f:3a:27:94:f9:e8:7b:72:
18:2b:1d:e1:72:f1:29:41:9b:d2:a1:be:76:48:af:59:2e:70:
54:96:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:15 2025 by rpki-client