Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/144286ab-f239-401f-a4ef-706749b0d570.roa
File: 144286ab-f239-401f-a4ef-706749b0d570.roa (raw, json)
Hash identifier: 9QwwZLhqAzdC877W2zDwuEUF0gALbUao4pF08SxpEB4=
Subject key identifier: 41:C7:00:34:FC:E3:C6:C5:E4:53:2E:14:B5:25:95:B1:86:7F:9C:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24C6E85EBD774957A07B18DFFC603ABF53D004E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/144286ab-f239-401f-a4ef-706749b0d570.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:80c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c6:e8:5e:bd:77:49:57:a0:7b:18:df:fc:60:3a:bf:53:d0:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1f90867e44e77026260889d6abb59b93cc042752284443bb813e3d70d7526b14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:22:bf:f7:eb:ba:c1:e9:45:ff:c1:20:73:9e:
b5:d5:00:9c:ff:bd:5a:7b:97:d5:62:fa:d8:30:09:
60:44:98:64:18:54:b6:18:ae:f0:a7:ca:d9:ce:ae:
5d:9d:8e:4f:6e:32:a4:5f:51:df:56:c9:da:66:99:
f3:30:ef:36:cb:6e:ea:95:d7:bf:01:0e:c6:ed:a7:
cb:4d:91:6c:f8:1a:01:4b:3b:78:24:08:19:0f:95:
f7:74:59:d6:bd:8e:05:b5:fb:5d:a1:8f:28:1a:ba:
7d:47:d9:37:5e:5e:8f:d2:e3:5d:fd:cd:bd:33:3c:
16:9b:ba:bd:91:10:a4:e9:9b:dc:9c:6d:b8:52:f8:
dc:74:f8:29:1e:b7:94:aa:6c:99:36:62:fd:1a:a5:
d4:01:3f:bf:49:1d:6d:ca:ed:4e:26:b7:9a:07:74:
ca:e0:a3:6c:44:b9:10:6b:3f:d6:cf:c9:bb:cf:83:
48:d0:2a:5d:fc:95:fd:d0:b2:c8:d1:fa:01:9d:25:
c7:cb:1c:d6:9c:ef:2f:87:0f:d7:86:10:25:ad:51:
2c:33:c7:4f:d6:21:d6:27:1e:3e:80:21:76:db:13:
e1:84:d6:7b:19:fa:99:65:58:02:b5:aa:eb:84:a3:
3f:15:2b:de:b8:33:ba:45:e5:0b:12:04:f1:1e:0e:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:00:34:FC:E3:C6:C5:E4:53:2E:14:B5:25:95:B1:86:7F:9C:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/144286ab-f239-401f-a4ef-706749b0d570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:03:1d:85:03:1f:c4:fe:8b:b1:08:95:12:9e:89:b5:b3:04:
16:8e:2e:f7:5e:60:45:9d:61:de:4d:c6:06:b4:2f:24:fe:d8:
62:1c:55:0a:7a:5d:f5:71:85:04:da:0d:af:7a:31:86:8d:95:
7f:a4:63:b4:59:a0:55:d2:c1:ad:4a:a1:4f:79:d6:00:77:f3:
79:81:67:ab:11:ae:f8:9f:86:e6:41:c6:a7:13:0a:2a:74:6e:
da:25:1f:52:8d:56:a6:4c:5a:8c:15:ce:d9:e7:b9:89:ac:d8:
55:fb:2e:aa:0b:3c:f0:01:8c:6d:5f:98:f0:ab:8b:f1:1e:97:
c0:f0:a5:3f:b1:67:0e:cf:59:49:d8:01:de:16:f1:b8:47:60:
b1:a8:04:47:b4:76:27:d4:ad:17:85:89:04:d6:75:75:7d:c7:
15:2f:36:ad:fc:1f:89:07:1c:e4:83:4e:35:e0:a9:37:c4:cb:
0a:83:d1:18:e2:a9:83:9e:c6:a2:72:36:65:cf:50:92:ab:db:
ed:92:50:01:84:9e:3f:62:15:d0:4a:fb:b9:3f:0d:3a:dd:64:
6d:cf:4c:21:5e:29:a8:88:03:25:b0:97:05:ee:e3:55:f2:55:
03:51:08:e7:0e:82:57:b0:85:65:99:f0:b1:ac:6f:01:4a:91:
88:c7:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:52 2025 by rpki-client