Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
File: 10e25f26-1142-4a43-8091-69f9ddd435c1.roa (raw, json)
Hash identifier: dqCBxlCww1z/W9cHsdDqcG/Wi4QoxhnlR8mjW7ScduM=
Subject key identifier: 22:79:95:D3:EB:2B:C4:85:20:9A:49:10:A4:48:A6:12:FB:93:C3:F1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AC314393DACC75AE7CDC06E3330B200FB3CC283
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c3:14:39:3d:ac:c7:5a:e7:cd:c0:6e:33:30:b2:00:fb:3c:c2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=3b0156fe777995083a24506c8ea2b27e154c9f578d5c84bd5264ea9919f28bee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:b6:83:a0:c7:8e:39:49:3e:52:63:fe:41:
e8:ee:e5:ba:4e:08:d0:c3:68:c1:34:9b:87:35:c8:
2a:ec:d9:ee:98:08:0b:8f:c3:86:24:38:10:5d:cf:
50:04:58:38:c5:0b:06:26:b0:86:66:78:68:bd:5f:
0f:af:45:1d:70:b3:1c:57:5d:59:4d:cf:88:f4:86:
3c:d2:6c:fa:b7:bc:85:57:21:97:66:ea:ba:bc:69:
fc:21:39:56:87:b6:ef:cc:61:9a:bd:c7:41:64:75:
40:fb:fb:84:a4:ec:56:f5:12:67:e1:04:01:08:77:
91:81:89:2f:d9:37:ee:c7:3c:60:b8:ea:83:5b:bc:
ce:78:c4:28:4a:69:1e:ef:a2:c0:08:ea:4b:9b:0b:
b2:31:a3:4c:60:59:2c:1a:28:8e:28:32:a8:93:c0:
95:09:12:14:ac:b4:b8:73:1e:c7:94:ee:d6:c8:dd:
79:cf:3b:15:d8:83:0d:58:60:cd:03:08:d4:26:42:
f0:e3:6c:1a:3c:d1:98:18:8f:86:e5:de:22:ca:83:
8c:e1:6b:55:1c:bf:3e:7b:f0:36:33:aa:4b:bd:54:
9c:37:c6:14:5d:12:98:b1:aa:db:92:a7:d6:54:4d:
6a:9e:47:de:9f:77:37:02:bc:02:19:4d:94:8e:19:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:79:95:D3:EB:2B:C4:85:20:9A:49:10:A4:48:A6:12:FB:93:C3:F1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:1000::/40
Signature Algorithm: sha256WithRSAEncryption
34:cb:94:fc:f1:f0:f1:63:83:06:3e:cd:65:8d:99:94:5f:71:
64:db:14:3f:64:02:3a:09:5b:2b:03:02:47:82:a4:8e:61:54:
70:44:f4:a5:31:ba:42:a1:59:54:e8:16:df:41:4a:62:8e:49:
60:f5:61:ac:89:fb:5b:0f:28:f7:e5:d9:73:0f:57:30:47:26:
f4:20:7e:0c:e1:5d:e1:79:45:ca:bc:ef:7e:b2:bf:0c:80:3d:
ce:78:e4:c1:ba:7b:c0:b3:4e:79:8f:de:09:11:09:6e:ff:01:
23:f1:ea:a1:e6:05:dd:2b:e3:06:9e:70:30:fe:1c:e1:30:50:
e7:ff:99:d2:40:fc:d9:32:1f:71:e1:02:d6:f4:1e:a9:58:a9:
b8:14:75:89:5b:2c:46:c3:77:53:60:e2:10:f7:eb:7a:59:8d:
95:6b:3c:0c:18:96:cd:f4:50:95:dc:da:32:8d:2a:c3:e2:b7:
1a:b9:cb:0f:ba:1f:64:ea:fd:df:37:09:cf:23:fd:6f:68:98:
23:af:54:af:53:71:58:04:1e:e8:a5:02:2f:c3:52:a6:23:d3:
30:06:9f:ce:a5:57:81:f7:c2:6a:21:0d:99:66:60:79:d6:dd:
1e:19:d1:0c:4c:69:be:54:ae:46:36:24:67:7f:ea:a5:d7:bf:
e6:a9:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:17 2025 by rpki-client