Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa
File: 0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa (raw, json)
Hash identifier: 3saB6/zuawOxHOsnZGmHEMH9BmeuioXH7sGiaqCVOxY=
Subject key identifier: 94:83:E2:A8:C1:CD:D7:40:9C:41:6D:80:BA:75:61:F2:A4:E5:7B:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A5AC0DFD5503B145B85DE2B1BFB44B392B463F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5a:c0:df:d5:50:3b:14:5b:85:de:2b:1b:fb:44:b3:92:b4:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ee6388cf97dcc4778b835663a41dc0ad0c6abc959d7c0df226c30ddaea2fa974, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:a1:69:17:96:c3:a6:cd:13:2f:cb:f9:47:
fc:42:0a:ba:4e:fa:e7:a2:a9:ed:cf:cc:bd:3e:05:
d2:c4:8b:fb:7b:73:e7:cf:5d:e4:63:cb:a8:d8:a0:
1c:6a:fd:e3:f8:49:e0:95:3a:f3:92:38:ef:48:b2:
ec:6f:b0:6e:b3:e4:b6:b2:4d:73:9c:17:f0:e1:d4:
8c:49:3c:07:1d:a9:ec:55:6d:36:37:01:c0:71:62:
d6:31:31:c7:19:15:9b:8b:db:b3:3f:a2:3b:25:d3:
1e:13:c5:75:41:f7:fd:54:08:d3:61:fb:fe:91:08:
74:65:82:d3:8b:0d:43:a7:52:b0:10:1c:37:28:1b:
a7:82:fe:6e:7d:61:86:28:b4:86:0e:c9:47:ba:ee:
fe:4e:7f:3e:ce:39:55:7a:a7:12:57:6a:0c:8b:59:
c8:be:e7:6f:4c:ac:d3:16:50:4d:d5:b1:1e:fb:32:
ce:b0:f2:2c:42:72:20:28:8b:d5:72:2a:53:fb:70:
89:bd:7a:ba:a1:a8:b3:59:ee:38:aa:8e:d6:1e:2e:
eb:75:93:fd:45:7f:38:29:00:77:60:36:5a:bb:18:
bd:71:18:9b:b8:86:d9:6c:a9:b8:71:f6:39:6b:4a:
92:8c:37:ab:52:30:c5:95:9a:5f:89:5c:6e:c1:91:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:E2:A8:C1:CD:D7:40:9C:41:6D:80:BA:75:61:F2:A4:E5:7B:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
86:9e:cd:ae:29:6d:2c:cd:de:6d:63:98:7b:07:93:cc:e8:06:
19:75:16:30:02:c7:68:d6:70:c6:57:b3:2c:48:05:e9:4d:33:
e6:6d:48:be:db:63:6a:eb:74:a0:3c:ed:6e:a2:27:3b:cc:1b:
af:c1:a6:bc:8a:b1:29:81:45:fd:dc:39:ab:75:02:00:09:37:
c7:8d:28:78:4b:fb:02:86:e8:c4:28:e9:be:6c:3a:a3:92:a0:
d8:38:0e:7e:d3:6b:e5:ba:ae:56:92:35:ea:20:c6:4e:93:87:
8f:ba:c7:23:53:94:89:fa:fc:18:f1:e2:02:ec:30:b6:4f:fd:
cf:5e:c4:4c:78:5e:9a:bb:4a:1e:2c:c9:37:bf:df:84:50:db:
5c:9f:5e:43:cf:2d:62:0e:b3:29:26:64:fe:61:c7:b4:00:91:
07:f8:5e:37:d3:4c:1a:6d:b6:30:0b:2f:bf:de:c2:17:5e:55:
bf:c4:34:32:06:43:31:0f:6d:8c:06:b0:19:6e:3d:f7:4f:1b:
07:a2:56:08:c8:16:7c:05:16:ef:c2:e7:79:77:3c:fc:64:5e:
c2:d2:41:85:73:ee:84:57:92:2f:6a:9e:7f:5c:59:68:67:4e:
c8:c5:52:34:92:d5:9a:9d:65:05:3a:fb:3a:99:0d:89:fa:72:
3b:06:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:25 2025 by rpki-client