Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: 7+aQ+dVauWg007gKfSNCP4Eo8Kuz5+oEc2B1tPb6cTI=
Subject key identifier: 1B:64:0A:35:EC:81:1D:08:6B:23:5E:B7:7B:B6:B3:AD:DF:BB:0B:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BAC043522C56D511CE977D1A4E7C2A5009E04D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ac:04:35:22:c5:6d:51:1c:e9:77:d1:a4:e7:c2:a5:00:9e:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b4dd5f2cb0f12ae9dc37c50984db2c36977e9d6f275841ef9c1403a7a3b8e05c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:c2:85:c6:88:cb:a3:8d:b3:e1:f1:87:52:
b6:75:57:2a:3b:f0:46:f4:02:6b:7e:c3:36:d2:ab:
ef:cd:f3:f1:c2:87:ff:66:c0:18:eb:d8:d0:28:7a:
c6:4c:81:87:06:80:41:2a:ea:a4:50:d6:f5:59:2f:
4f:ca:4f:d9:7b:26:fe:fa:0a:af:af:24:08:aa:c6:
a2:19:20:1c:74:77:01:03:c0:f2:35:bc:d4:cd:e0:
a9:f0:a8:eb:5a:07:1b:7a:53:cb:cd:c4:5a:84:f4:
5c:5f:1e:c3:80:3c:7d:8b:d6:c1:af:b3:9d:8f:d3:
47:34:8a:a5:7a:01:37:71:1a:1c:9c:d3:72:4d:1e:
75:06:24:b6:ef:dd:a1:bb:8f:f2:63:92:c8:0e:a9:
e7:14:7a:89:0a:d6:ff:44:1c:0d:c3:8a:0d:98:95:
61:8d:13:7c:b3:97:c3:14:bc:49:cb:59:7e:de:1b:
26:e8:f2:b0:d3:99:0e:6a:16:52:f3:f8:4f:a8:44:
e0:9a:19:10:3f:f2:0a:50:6d:78:1e:ab:4e:63:d3:
15:14:75:22:d5:7c:0d:ab:2f:30:4c:f0:ce:d6:35:
97:13:bc:bf:8b:a9:65:ac:0f:3b:4e:55:8e:22:1f:
af:ea:f2:26:c8:08:18:b8:89:06:66:f4:b7:c0:74:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:64:0A:35:EC:81:1D:08:6B:23:5E:B7:7B:B6:B3:AD:DF:BB:0B:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
68:3f:62:ed:28:3d:40:9c:db:68:16:47:f1:13:9a:da:e9:5f:
c1:d5:07:c1:6b:fc:09:68:6a:90:4b:81:82:b3:1b:fb:88:de:
c2:d3:16:23:10:c9:32:82:18:76:1f:fd:df:64:d1:c2:58:c3:
ff:a5:47:74:d2:68:31:f9:bc:3f:44:58:02:8b:05:89:39:f6:
30:c3:b5:96:b7:95:30:60:5a:4b:f3:38:ba:70:34:67:6a:b9:
9e:aa:c7:89:be:8e:55:b8:0b:f8:2a:ce:1e:50:74:07:e6:b2:
a3:10:bf:ea:94:03:4c:d2:e1:64:b0:82:34:1f:0d:d9:65:b1:
73:ae:f9:7b:2a:82:4a:90:6b:ee:2c:3a:fb:dd:28:18:90:f7:
46:64:3b:dd:c2:e1:4c:24:53:0c:f0:ba:2b:42:8d:f7:ce:17:
90:81:f1:e2:e6:99:a5:0a:46:f6:f9:21:85:42:b3:a6:a3:59:
a9:df:f8:93:60:15:3b:e1:f6:ef:27:b6:b6:4a:10:7b:32:f8:
ba:a8:8d:2e:13:bd:b0:51:45:9a:ec:a7:36:3d:a1:8b:dd:a0:
23:9f:c3:cb:6e:28:38:52:ee:ab:9a:30:40:4a:8d:33:dd:cb:
98:3a:f5:96:f6:5a:fd:34:7d:72:ad:09:c4:44:38:2b:53:1f:
e3:d3:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:12 2025 by rpki-client