Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
File: 0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa (raw, json)
Hash identifier: moLzNmJffd/FoVS4bPoJEtBAfsXVw1Q44bY6/dGWEl0=
Subject key identifier: 7D:03:FB:0C:5F:A0:4F:A3:A0:15:F8:75:70:49:93:09:A8:24:D6:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 500B87075854126D59D194953AB665586F8DF40F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0b:87:07:58:54:12:6d:59:d1:94:95:3a:b6:65:58:6f:8d:f4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f918f97edbadb6ed5bd1f4a7b7db40d84f744bf7c036db5e171aa95360c1d8f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:5b:1a:93:04:31:32:57:9b:31:cc:2e:7b:
a8:61:28:3b:ff:3a:14:18:69:33:35:e3:94:4e:ce:
14:4e:ce:fc:f5:3a:3f:6b:57:3e:6f:84:29:b0:22:
c8:5b:8a:43:bc:0d:ec:d6:18:58:de:4e:6e:ab:18:
78:69:79:5b:4a:7d:71:9e:3c:92:8a:77:93:e8:d6:
16:92:03:35:e6:97:3e:8d:5f:5d:12:d7:2b:e8:64:
10:70:05:a8:9e:fd:d8:ca:d0:07:7b:5c:b8:37:2b:
72:0a:4e:6b:4a:11:57:60:e8:0e:8b:32:7a:5e:0d:
96:05:c5:06:db:b4:06:64:1c:f3:e3:63:a8:18:4d:
e2:f6:c7:19:49:6f:6d:be:98:13:65:a0:56:93:53:
c8:c3:20:7c:b9:7f:19:db:aa:aa:25:87:c6:86:aa:
6f:7a:63:12:d6:da:46:20:e8:5f:eb:61:c4:36:4d:
fb:8b:93:d5:ff:65:fa:f6:6f:8e:98:7f:09:93:45:
38:0a:ce:09:6f:ec:83:e9:30:b2:b9:e8:6c:d4:5e:
45:a6:a1:40:30:05:09:41:dc:0c:05:a6:96:35:ba:
b3:15:ed:e2:ed:7f:ab:57:45:45:50:46:f6:1c:26:
08:55:27:59:e8:21:ec:35:91:b0:b6:79:69:94:88:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:FB:0C:5F:A0:4F:A3:A0:15:F8:75:70:49:93:09:A8:24:D6:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:1f:11:61:2d:4f:5b:83:ff:01:93:47:f7:a0:da:31:57:ff:
1c:6a:79:76:ef:04:1c:09:07:80:50:ea:13:06:85:e4:81:66:
d3:14:03:78:1d:82:d4:54:25:29:11:6d:b8:32:2c:58:46:11:
0c:41:aa:29:16:ce:c2:0b:15:04:68:4e:40:0c:2e:7b:33:3b:
fb:3e:f8:2a:61:f5:26:4f:29:3e:ad:ba:91:92:f0:6c:ff:09:
30:d0:d0:27:e4:fd:1e:06:5e:1e:10:d5:02:a4:35:46:99:80:
09:9c:ca:64:50:56:91:fa:b7:43:fb:97:de:74:45:16:cc:87:
1a:b8:56:57:51:0d:ac:ce:d0:5a:f3:56:a2:2e:f6:94:24:1f:
8a:0f:4f:06:a6:07:90:ec:6f:46:8f:e5:b6:8d:f7:d6:34:b5:
88:93:db:8e:5f:7e:42:c0:12:ce:dc:71:3c:be:6e:d6:22:b7:
d2:da:fc:53:40:30:47:ca:69:ac:57:51:72:b9:5e:19:85:45:
ce:4f:5e:b1:54:44:9e:31:94:14:e3:13:76:0a:6c:2b:47:7a:
49:d5:8b:5d:6b:3d:c9:41:f7:86:26:94:93:61:49:de:de:5a:
2b:37:70:11:3b:67:6a:b6:03:07:23:96:95:a5:c1:bc:6e:98:
bc:30:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:50 2025 by rpki-client