Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08c9b21f-2547-4cfd-833a-33954d1f18e2.roa
File: 08c9b21f-2547-4cfd-833a-33954d1f18e2.roa (raw, json)
Hash identifier: FVtOWkbDdEPalI7pTyKwC82O6v4uuMVrNfOZgkjEOZg=
Subject key identifier: 51:D9:54:C0:AB:45:F5:41:33:1D:F3:E3:7B:A6:7C:C6:A3:1D:85:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0170EA71089EAA10F409BB8D331FE6F7D1CD1EE0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08c9b21f-2547-4cfd-833a-33954d1f18e2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a0c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:70:ea:71:08:9e:aa:10:f4:09:bb:8d:33:1f:e6:f7:d1:cd:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=fc917ca1f0e0bf9518c7de064064e18813577205bb94086997f3db3022b6a363, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:82:9f:91:fb:fe:9e:6c:c8:35:82:ce:b1:
37:8e:87:5f:2d:1c:75:af:69:af:70:7f:40:5f:c1:
71:29:81:dc:78:09:34:bc:93:b6:a0:25:b8:05:79:
e6:6a:64:38:a6:95:69:6e:14:98:98:e6:12:5f:05:
dd:e7:9a:04:10:10:38:77:ea:53:6f:e9:9f:d3:a0:
e6:36:e0:55:51:4a:2b:df:b3:bd:52:2d:c6:04:49:
3a:c6:e8:69:a1:1c:6f:c6:b1:78:a2:2c:15:25:f9:
36:1f:fa:7e:5f:48:4f:00:42:a2:c0:e1:bd:52:f2:
b4:b2:b9:9d:13:ed:1d:d3:75:38:f5:d8:cc:1d:d4:
05:27:cc:69:db:67:19:a9:2f:32:8c:9c:72:19:f4:
4d:52:0a:ed:cd:02:97:19:db:05:2e:2f:9a:21:9f:
f5:83:80:4d:d0:97:af:75:06:f8:0a:3d:0c:1e:16:
8f:12:24:47:c1:db:23:d0:aa:0b:39:c2:7f:b4:d6:
de:a1:da:19:53:e4:22:ae:48:85:6a:22:fa:63:ae:
49:e9:69:54:c6:53:9a:6d:e0:4b:61:97:39:e2:0c:
15:f6:70:b0:88:cf:76:64:67:be:02:98:cc:aa:27:
89:fc:7c:a6:65:3a:90:7c:4f:54:50:62:f6:96:df:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:54:C0:AB:45:F5:41:33:1D:F3:E3:7B:A6:7C:C6:A3:1D:85:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08c9b21f-2547-4cfd-833a-33954d1f18e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
47:45:1a:ca:76:3f:02:13:27:59:9d:5d:fe:cd:be:0c:00:30:
08:ee:ed:bd:e4:1a:5f:9c:32:c0:7f:7e:d0:7d:13:78:7f:ce:
45:0b:62:ba:a4:63:29:3f:21:05:a5:af:4c:b0:4d:c5:84:56:
d1:cf:10:81:4c:d6:90:bd:55:65:31:96:0c:c9:cd:00:98:24:
4f:6b:a6:38:92:b1:c2:d3:a5:37:7b:98:1f:e0:d6:40:5e:27:
27:3e:2a:4d:ba:a9:2c:94:2a:38:16:bf:8f:a0:11:6e:99:bb:
50:72:0f:5f:27:5b:79:0e:88:fa:a1:69:8c:1f:b4:4f:a5:f0:
8e:d6:62:b2:c3:35:5c:ff:39:60:e4:8f:75:db:25:90:8c:4a:
f7:3e:6f:f9:61:f8:ca:14:da:14:c4:e7:e2:83:72:6f:3e:48:
18:eb:1f:42:e7:0f:59:89:c4:c2:57:df:76:f8:4f:39:f3:bf:
27:fa:6f:4f:1e:13:17:de:98:bc:eb:b9:16:79:7f:5b:78:e7:
43:0d:de:5c:92:c1:38:22:c9:0e:d8:ca:d4:69:e3:4a:85:34:
e0:19:5e:3e:bd:c7:e7:d6:f5:1e:5f:d3:1a:2c:29:1a:27:75:
20:68:c5:24:db:9d:b3:06:8f:95:a2:b6:00:d1:9c:c5:0f:30:
83:96:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:56 2025 by rpki-client