Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
File: 04593af5-4653-4d6a-8bb5-65270db84a4f.roa (raw, json)
Hash identifier: QWg1IBZ2iKP4DGLmGjEu9iCS8tVLNRo1o7DiDvMIuxQ=
Subject key identifier: 38:37:10:E5:17:92:9C:61:4F:38:48:B6:B7:63:8E:E1:15:19:CC:37
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AC85677CF36B22B0890A238D5160D7E500C023F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02d::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c8:56:77:cf:36:b2:2b:08:90:a2:38:d5:16:0d:7e:50:0c:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=83dd53c2bcf6eb7fd461826a128c7a0ff01dec9191a54246772db2cc0517cb83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:b0:e6:03:de:32:b1:21:12:ae:15:32:50:
d1:c8:64:1b:67:61:fd:da:df:76:77:d4:58:6e:9a:
2b:c2:21:f8:00:8a:b7:c0:5a:35:9c:9c:3a:3c:3e:
e2:36:21:dc:10:8e:bb:3f:78:6b:dd:ee:1b:32:23:
c6:b3:b7:c6:bd:03:28:1c:38:89:98:4d:53:8e:d7:
3f:4c:7b:31:a9:23:c1:29:84:9c:41:d8:9f:63:71:
0a:30:fc:eb:e2:9b:0f:eb:bc:6f:ab:36:c1:3a:18:
06:d0:ba:f6:45:20:18:53:e4:54:80:25:48:2b:69:
4f:32:fd:52:7f:89:db:04:81:82:b3:f5:30:d2:07:
0b:05:2a:be:8a:6d:0d:94:b9:9e:3c:cc:7d:90:88:
5c:a1:8e:83:3e:23:b8:ee:0e:31:09:19:2e:57:07:
6d:2d:c5:41:a4:c6:c1:c1:ee:4d:24:db:18:33:a2:
7f:3d:ba:28:cc:43:63:3d:59:10:77:de:dc:3c:e1:
e3:f8:0c:7d:7c:e2:12:34:2d:37:be:45:01:ef:16:
bc:af:fc:21:b7:77:72:06:c2:cc:eb:f5:55:9c:dc:
83:d7:74:32:2e:c6:f8:16:bd:c8:84:65:4b:5d:5d:
5c:e0:f8:25:fe:85:45:5e:ef:cb:d5:ee:17:cf:8b:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:10:E5:17:92:9C:61:4F:38:48:B6:B7:63:8E:E1:15:19:CC:37
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02d::/36
Signature Algorithm: sha256WithRSAEncryption
c5:95:50:93:8c:bc:7b:09:e9:35:fd:cf:26:96:58:db:3e:95:
e2:cd:ac:33:32:ee:32:ca:fe:78:ac:03:c5:00:12:63:f0:6c:
94:51:59:6a:0c:ec:0a:23:96:b7:95:45:88:f9:de:40:1b:d5:
1d:56:67:08:15:79:c8:c5:4e:e4:25:0c:4b:93:59:63:e0:23:
13:f7:59:1f:d2:a6:a8:14:1e:ff:b6:40:7b:e0:6a:87:bb:e1:
28:87:c2:bd:7f:9b:e1:73:9b:7c:ed:e8:a1:0b:c2:b3:72:26:
2e:61:15:6f:40:bc:36:8a:3c:d4:22:ba:ac:f1:57:ce:2c:7f:
58:c9:9c:8a:e5:23:d5:34:50:01:02:96:96:db:ad:94:cd:e2:
af:ab:a6:cb:c3:00:02:0b:00:06:f7:20:ea:92:f3:58:cc:78:
f8:74:24:ab:43:ab:3f:2d:76:d8:4c:d6:9d:92:5e:2c:6a:c7:
38:b4:51:22:55:f9:4e:13:49:6d:52:90:e4:1b:fb:6e:24:64:
c1:78:76:1d:70:52:f5:b9:bb:9e:da:ad:d9:07:a5:3e:c3:1f:
8f:3b:60:98:9a:20:49:b2:7c:f4:7f:6b:09:84:a9:8f:a0:61:
a2:21:b5:9e:69:5b:c8:7e:1b:6c:6e:e8:50:6b:60:be:3f:5e:
57:b5:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:09 2025 by rpki-client