Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
File: 0d8c280f-edb2-45fb-9207-8226dc900bb1.roa (raw, json)
Hash identifier: vURV/6BMTp3c1w0TnjyU1AFTZSNbT70MbHd0BO4NaSs=
Subject key identifier: E4:9B:22:7C:B4:C5:64:5D:D3:E1:7A:26:FB:5D:E3:0C:7B:87:44:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4859FA1DF7451BA5378163D9F427C57EAA053E43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:59:fa:1d:f7:45:1b:a5:37:81:63:d9:f4:27:c5:7e:aa:05:3e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9329cf5ec9225a67f416e60fa094a4d4d3a05281960fd89e86a7baef4df3e61a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:8a:b2:52:bb:bc:96:c1:c2:b7:85:66:44:
e0:39:0b:5a:a2:86:e6:21:3c:11:e8:59:bc:3b:58:
7c:0d:ff:cf:3b:2c:79:eb:71:0a:fe:b7:f3:c0:49:
04:67:11:8a:e8:61:62:3f:8e:b1:e3:dc:50:48:4d:
32:17:82:67:b8:1b:31:e5:5a:94:b9:d9:b9:b0:de:
a2:2e:5e:a7:04:db:fa:b8:f3:a0:22:1c:b9:8a:b3:
39:71:ff:2c:ab:40:3b:07:d7:f2:37:d0:d9:77:0f:
43:2b:77:4d:3e:f9:b8:5a:0d:5c:6d:3d:d0:1d:c8:
24:6d:09:06:5b:81:b8:c5:ab:72:9c:0e:68:e0:34:
3a:b9:4b:ca:22:0c:6e:1e:be:12:68:4d:ad:ca:9a:
56:62:c8:fe:c9:49:cd:55:dc:06:c0:19:84:3a:2a:
fb:e3:50:45:5c:3d:79:84:1e:98:47:11:5e:c0:71:
f9:59:86:b1:4f:80:03:cc:9f:6c:fa:3c:c5:c5:37:
e9:37:67:c9:fa:52:db:95:3f:da:8d:e4:54:2a:36:
b4:62:6f:1d:72:e8:46:fc:45:3a:0d:55:ad:f6:66:
6a:1d:d2:3d:fa:24:1a:a5:df:91:9e:77:9a:f7:ef:
6f:f8:a0:80:e8:2d:d1:b8:ad:c2:10:de:63:9d:38:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:22:7C:B4:C5:64:5D:D3:E1:7A:26:FB:5D:E3:0C:7B:87:44:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5080::/48
Signature Algorithm: sha256WithRSAEncryption
27:cf:c1:91:1c:3a:c3:9b:f0:fe:c8:dc:4a:2d:0f:ca:8c:9d:
70:8a:05:b1:8e:36:d8:c4:06:2c:c9:48:3f:3d:a9:37:95:d0:
3f:39:47:d0:1f:fc:d5:b4:f7:36:ad:c3:8d:fd:8e:9f:69:f5:
0c:37:31:b6:f3:b5:f1:41:04:55:9c:5f:2e:11:f5:18:20:28:
c1:4c:4b:3a:20:c6:de:e9:f2:be:13:1e:97:8d:62:0c:b7:13:
dc:0e:ff:a6:93:b0:9b:de:db:0c:ed:67:d5:de:ef:4c:5a:80:
24:7a:cc:21:cd:c9:5c:17:07:fe:d8:a1:bb:0c:b0:a1:94:dd:
7c:95:33:9e:6f:b3:e0:fd:12:9a:2c:02:43:28:92:dd:4b:35:
8b:af:e3:0d:0c:96:e2:26:8b:9f:16:be:97:2e:18:14:c2:53:
b9:27:3f:3b:8e:38:1b:cf:d8:53:58:2c:e8:94:35:fc:91:5f:
bd:df:36:67:66:30:3c:59:a4:41:30:04:82:ec:8b:39:69:2c:
35:d9:80:13:99:c3:4a:01:ad:39:87:8a:b5:0a:e9:ee:be:65:
47:c9:f6:11:df:ba:4c:b7:a8:cc:79:01:c1:75:10:7b:d5:92:
0b:69:44:48:37:c8:05:cb:28:40:d0:d9:c4:cb:8a:38:2f:62:
fb:cd:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:26 2025 by rpki-client