Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
File: 16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa (raw, json)
Hash identifier: c8B1TnNkNHVGEve4+RaVXe1b8FL4BEx3b024zrLxM6I=
Subject key identifier: EC:83:F7:23:97:83:D7:BA:F0:ED:82:07:66:67:4D:9F:09:C2:F5:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BDA03F2B33F87CCA32DFBF7A43B04C05C753C05
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:da:03:f2:b3:3f:87:cc:a3:2d:fb:f7:a4:3b:04:c0:5c:75:3c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=d132b7def2ee23514e3defbf16415358aa273fc21878f05f13ac7ab488d8ffe3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:61:bc:5a:af:e9:f4:e0:c9:ff:fa:2e:51:
d2:24:e3:80:d7:0a:5b:1d:35:8a:8a:32:1d:f2:5d:
58:b0:9f:3b:a2:41:3a:6d:c9:10:07:d5:ad:5c:3a:
e6:3b:67:52:97:f7:1e:00:a9:08:16:5e:31:b5:10:
66:17:6d:df:01:4a:00:5c:4f:8c:14:e0:9e:43:ed:
04:14:3a:68:56:17:8e:18:d7:d2:d0:f9:57:54:e7:
d9:58:0f:c7:b9:19:36:8c:85:45:31:81:e2:94:c6:
78:7c:56:1d:0b:99:b3:3b:9e:a5:19:14:99:d6:86:
d7:35:49:d0:ab:8d:3c:af:3b:fc:15:3e:18:0a:6f:
93:51:db:19:15:5e:cf:d8:ae:70:cc:f2:60:63:4c:
b3:2f:be:a9:7e:20:a7:b1:81:1a:e3:7d:8a:0a:a2:
a3:53:1f:92:83:7e:de:53:3e:e7:64:72:85:65:a2:
ea:b0:5d:78:af:98:9b:ac:e1:c9:28:23:f6:c4:14:
97:70:5c:5e:a6:f8:34:ed:c6:64:7b:b2:45:15:ea:
25:19:72:c2:a1:f8:01:f1:19:43:29:b1:cd:94:ff:
34:de:a3:3f:ab:57:71:e6:f8:08:67:02:db:71:be:
38:b3:a8:9d:e4:6f:b5:68:1c:40:60:b9:3d:d6:0b:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:83:F7:23:97:83:D7:BA:F0:ED:82:07:66:67:4D:9F:09:C2:F5:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:b000::/40
Signature Algorithm: sha256WithRSAEncryption
90:6d:46:31:25:52:89:d5:e7:2f:9f:a4:3c:8c:25:36:2c:87:
ce:0c:0c:8f:86:b0:b4:8c:e4:bd:d3:18:e4:ea:4e:a1:2a:a5:
1f:d7:58:30:ce:91:bd:87:6b:fc:51:3b:e8:2c:4f:00:e9:8d:
60:4d:70:56:33:4d:e2:6a:7b:0d:52:f2:6c:bf:2f:11:ef:48:
2d:ec:5f:7f:39:f0:09:cc:e4:b5:47:10:d3:f3:00:8c:fb:8c:
bf:95:02:a0:b8:ca:a6:44:01:9d:98:51:db:9d:01:17:99:94:
59:9f:4d:17:ed:68:4c:8a:58:b2:10:ec:b8:45:e1:f1:cd:9b:
ca:3b:bd:f1:66:e0:20:a6:9d:cf:d6:a2:d4:6e:fe:ad:3b:32:
bd:2d:68:6d:bf:8d:15:85:8a:3e:f7:8c:1f:44:a2:74:32:36:
19:64:a0:20:7c:c9:89:57:89:5f:b7:bb:3c:a3:79:0c:d9:23:
6d:26:ee:69:1a:ec:a7:26:93:10:37:1a:fb:fb:a0:77:2c:be:
ac:44:d0:e1:b5:24:7f:75:26:78:e4:68:91:4e:ec:de:cb:f4:
d9:77:c5:97:ae:ce:8c:9e:5a:01:b0:2b:3d:2c:ba:62:4b:73:
07:ee:7e:f5:34:fb:e5:4c:2a:19:d6:b0:88:13:d5:1d:2b:fd:
3b:35:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:45 2025 by rpki-client