Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/031fdd48-d66d-4cba-8375-4bf3f56ae206.roa
File: 031fdd48-d66d-4cba-8375-4bf3f56ae206.roa (raw, json)
Hash identifier: ia15qXM3wWuIabOT+kFARXThxmLVhCDCj7VZ75lPJsg=
Subject key identifier: 3A:91:05:D8:1C:24:1B:E5:AC:D6:21:05:C2:5D:C6:FE:C4:52:D8:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45C1C3E33583A6A722B5332D2DD5BDB7C523FD00
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/031fdd48-d66d-4cba-8375-4bf3f56ae206.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:c080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c1:c3:e3:35:83:a6:a7:22:b5:33:2d:2d:d5:bd:b7:c5:23:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ab6196986ded72b07867251814727412bb925b42f72831f19e445bf0b37ddd05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:43:0b:08:a8:29:71:04:06:89:2b:53:02:
16:a9:ad:11:17:ee:fa:10:71:75:c4:66:54:25:bf:
10:a6:41:ec:dd:dc:5c:c8:21:d5:8d:5f:e0:70:05:
1a:a1:0d:bb:e3:4b:6e:56:d7:81:ec:bd:e4:87:93:
77:e0:96:d5:9d:3b:e7:b8:3f:1e:ac:e8:2d:f9:15:
17:78:b7:92:5b:86:6a:80:88:8d:fc:d7:67:d3:8b:
c0:5b:91:fc:e9:08:b9:69:6a:6f:fe:75:8d:e2:b0:
d9:48:9d:22:aa:79:40:be:b6:6d:af:bd:73:1e:08:
a2:56:f2:db:fc:c8:39:6f:38:b9:40:9d:f7:c7:69:
fd:76:ed:2e:95:92:ac:72:84:1b:57:80:3d:fe:9f:
95:f1:98:15:cc:46:21:31:52:1c:dc:e3:ab:a5:38:
65:da:76:c0:96:fd:e1:01:26:bd:9f:a8:13:31:3c:
dd:a0:a4:b7:31:95:c9:3b:03:7d:1a:e7:db:d6:53:
9d:0b:bf:76:98:ff:4d:db:8e:91:e3:55:f6:1c:a1:
6b:93:53:23:b5:a0:27:3a:cd:c1:34:60:d5:95:68:
c9:9a:a3:55:6c:72:8c:1c:06:bb:02:89:18:29:95:
a6:9d:37:de:5b:16:e4:e2:25:22:5c:c9:05:96:b0:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:05:D8:1C:24:1B:E5:AC:D6:21:05:C2:5D:C6:FE:C4:52:D8:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/031fdd48-d66d-4cba-8375-4bf3f56ae206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:c080::/46
Signature Algorithm: sha256WithRSAEncryption
50:ff:64:c3:3c:b0:88:72:20:f3:89:26:7c:05:39:09:b0:93:
3c:89:82:c5:65:7d:90:fa:1f:3e:c0:c6:8d:5f:2f:6f:01:6b:
b9:46:ba:f7:14:8b:fa:16:f6:14:3c:0a:19:c7:43:79:aa:dc:
b5:c4:64:f5:00:00:cd:b1:3c:ae:ab:00:78:a1:40:69:69:be:
dc:22:8d:c5:4a:10:cf:31:2f:57:1f:f3:c3:4e:98:b3:20:89:
0b:88:49:0f:47:29:f4:28:18:f5:19:e2:12:7c:da:c0:d6:49:
79:cc:9b:02:16:b4:ce:c3:f7:a0:8c:d2:d5:19:ea:c4:68:da:
a8:3d:49:83:94:91:39:62:d2:ab:6c:4c:37:0f:3f:1d:97:c9:
a6:53:79:7e:30:0c:22:28:6a:dc:0f:4c:a6:87:47:19:66:19:
73:89:53:aa:22:a7:a1:96:59:e5:60:cc:eb:72:8a:2a:21:cb:
f6:86:fe:c6:45:71:21:21:93:25:51:27:a3:33:2a:2e:3b:0b:
bb:db:7a:c4:e6:90:54:7a:7a:fa:4b:7c:38:20:f7:8a:72:ae:
e0:cb:52:7c:86:dc:00:44:24:fa:2b:4e:ea:98:6d:f9:f1:39:
56:4f:e6:4c:08:40:56:d3:b7:3b:81:5b:b2:3e:75:62:7e:4d:
8a:90:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:16 2025 by rpki-client