Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
File: 03a11d7d-6d37-488c-8fe1-258c484d1682.roa (raw, json)
Hash identifier: sKTPSVFx6y3AJ7U7EmPzHPsGgG0ihgQqhvxCgWX/6vM=
Subject key identifier: 27:F4:4D:47:48:3F:B1:4E:B7:8F:3C:99:8B:60:35:46:7D:42:BE:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36EBD8305E3C25E0EEEE9F5C917C2D13BC4682C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:eb:d8:30:5e:3c:25:e0:ee:ee:9f:5c:91:7c:2d:13:bc:46:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=dc22485e637c5a22a47e746a918cad905f8130a21ecf6129d4393020f2ca874a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:d9:2a:bd:5d:de:98:f2:ad:92:b8:4d:14:
c4:37:29:32:be:62:27:ee:d5:21:aa:a1:29:aa:f6:
07:3d:b6:8b:2d:26:95:4f:52:71:f2:4c:0a:94:f1:
0c:6b:1b:55:fe:ca:d3:c8:34:ba:ca:a9:cd:eb:19:
00:fe:28:6d:5b:9a:5d:8c:62:0c:81:29:8f:6e:af:
f5:91:98:cd:fc:84:3a:a9:6e:09:3c:ba:9f:34:5a:
0b:0f:c2:90:41:0a:0d:5a:5c:d0:99:c1:a9:01:8c:
d5:59:8d:9a:dc:25:f2:4f:bb:3e:bc:c5:bf:25:f9:
1c:bf:a2:c5:ed:44:c5:02:db:7d:d6:2d:d6:35:35:
04:fa:5e:09:06:76:8f:9f:6b:d0:fe:77:f9:cc:be:
e2:63:01:20:c7:4b:e4:6b:35:57:e6:aa:64:4a:70:
39:5e:ed:30:3f:f5:5d:c4:c4:4c:e8:47:b1:9f:fb:
cd:db:ff:01:b0:88:6f:c1:bb:57:dc:af:23:f9:e2:
78:eb:33:1d:64:db:41:d9:ac:06:b7:78:0b:11:09:
e8:78:18:64:69:50:a6:fc:a6:3c:4a:e8:aa:0a:9a:
c9:cc:78:19:f4:d8:1c:2a:bd:35:86:f6:f6:58:d3:
30:38:cb:09:fa:81:e2:69:0a:7c:c0:60:f8:d2:ec:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:4D:47:48:3F:B1:4E:B7:8F:3C:99:8B:60:35:46:7D:42:BE:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:b000::/40
Signature Algorithm: sha256WithRSAEncryption
60:41:1a:fa:3d:db:7b:74:c4:f8:a8:45:f9:98:1a:d4:25:f9:
2e:6c:0e:40:f7:0c:ca:e1:fd:ce:d3:20:c3:02:0e:64:4c:4f:
1b:0b:1e:a1:06:b2:36:56:6c:95:2f:bb:f9:4a:7c:4b:98:46:
54:69:22:26:9d:ff:a7:88:4e:5e:f4:ca:5b:87:21:49:e4:f5:
12:83:cc:9d:f9:8d:a5:2c:af:44:30:ef:37:d0:8a:65:49:69:
6b:3a:8b:22:ee:13:ef:2f:dd:17:b9:02:f2:d9:5c:8f:d0:8b:
ba:56:7c:e6:20:28:88:4b:b4:5e:7d:45:59:19:97:11:4a:d8:
3a:6a:d0:c5:e9:0d:12:c1:9f:5a:25:07:38:d6:c6:50:c7:d4:
74:52:12:8e:60:a8:61:01:a2:d8:90:ab:7d:89:64:fb:f1:c6:
89:7c:1d:8c:dd:93:e3:1c:c0:2a:75:8f:c4:19:fd:cf:0e:5d:
03:9d:3a:90:d7:c4:e7:04:3c:96:8e:95:87:3c:98:47:66:fa:
dd:e5:65:4f:da:10:89:5d:3b:8d:70:4c:de:7e:73:33:4d:87:
70:1c:27:3b:9d:df:41:de:f8:a7:86:47:13:6a:90:fe:5d:27:
c7:e9:89:e6:f9:1d:cd:89:5f:8e:2e:10:eb:8f:3e:34:b0:83:
dd:46:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:40 2025 by rpki-client