Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
File: 0141b806-c012-49b3-a8da-73590b0cd2b5.roa (raw, json)
Hash identifier: 2jKCOHOYpvmGQ2lipFdd/hid3NEuauzzWkRfqJFr9fA=
Subject key identifier: 33:A0:FC:EA:CC:DF:F1:78:D3:BD:C1:D7:33:1D:32:56:0F:99:16:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57FC21ECF6EF2CA964795CD15C894C9CD1E2024C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:50c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fc:21:ec:f6:ef:2c:a9:64:79:5c:d1:5c:89:4c:9c:d1:e2:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a6cd44c82ac54a7aba848b384b8198e9eb3cdf9382977ab56fd81cfa568f5ae7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:24:ae:f3:c6:8f:ea:8f:2a:50:7c:4d:2a:
4b:71:af:ce:cf:f1:0f:b6:f6:70:39:4b:7c:6d:d8:
12:2d:02:15:51:e3:73:6f:94:7e:90:2b:55:de:ab:
53:76:2b:6c:e6:e5:9b:5b:42:51:88:da:2c:0f:6d:
41:bc:b7:38:6d:8c:28:19:dd:fb:69:94:f0:63:94:
8a:8f:4f:dc:7e:b9:c6:a1:50:1b:9b:4e:64:4f:04:
25:16:b8:b3:5f:08:b0:22:c5:73:93:6a:4c:2e:18:
6c:1d:ae:35:78:67:1b:be:49:5c:7a:50:90:2a:ea:
8e:b4:f3:87:7e:14:0d:e5:04:20:99:29:98:80:2e:
c2:27:8c:2c:80:88:02:1e:07:f9:8f:45:70:2c:9e:
95:85:fd:22:f1:fe:68:0b:67:1c:46:fd:0e:c9:e5:
b7:cd:8e:cf:06:94:4d:ba:13:cb:d5:6a:53:0c:6d:
76:b4:86:8d:00:37:48:c1:19:6b:5f:0e:08:7b:97:
3f:2f:fe:47:98:b7:ce:03:1a:14:20:d7:96:0e:d4:
f9:66:c8:d4:99:7b:37:64:1f:bf:f8:94:f4:a2:f7:
45:61:0c:24:03:04:c3:09:9f:60:56:d0:f0:ed:d6:
45:72:54:81:b1:b5:c1:e2:0d:dd:13:e6:95:86:79:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A0:FC:EA:CC:DF:F1:78:D3:BD:C1:D7:33:1D:32:56:0F:99:16:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:95:c3:ca:f5:87:41:2c:47:e3:15:72:46:3c:e8:e8:ba:92:
fb:69:c2:29:3e:1b:dc:34:ed:0c:0a:0b:53:b9:ea:8e:b9:82:
92:a3:01:4d:13:12:24:6f:90:52:80:21:60:5f:3c:93:35:d6:
43:a6:8b:32:d8:4d:c4:f9:dc:90:47:65:e9:12:0e:76:15:4f:
97:75:e9:3b:b7:4d:ea:fa:ee:39:ca:12:70:ed:d1:b3:0f:13:
52:d5:96:9b:02:91:ac:23:f4:2a:e8:96:aa:51:7c:93:20:51:
72:c8:f6:c8:a5:e5:d5:b9:3a:df:9d:b2:7d:45:4e:0f:8b:c8:
00:f1:74:50:19:ec:40:8d:86:ea:07:d7:a7:c7:98:58:3e:d9:
e8:82:72:00:15:08:36:ae:a9:50:22:f6:a0:24:c3:74:b8:40:
4f:6f:a6:e2:57:24:f9:7a:29:b8:86:33:d0:71:97:e0:db:61:
df:6a:72:93:09:0a:56:56:02:f6:e4:7d:1b:34:7a:c9:04:75:
e4:7b:0a:88:cf:56:4f:9e:b4:91:6d:8a:71:40:64:ee:7e:fa:
24:22:f1:29:ab:d2:c9:92:44:f1:86:69:9a:78:c5:86:ce:0f:
27:5f:ba:25:09:24:a4:a9:be:8f:e4:90:2d:73:ba:9c:e4:b1:
63:f9:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:56 2025 by rpki-client