Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17057de1-0841-47c5-9f52-f4f803d5e2d4.roa
File: 17057de1-0841-47c5-9f52-f4f803d5e2d4.roa (raw, json)
Hash identifier: p6Bt5RH/fym5FfP0pZ0pCGGLDoTJO3Dk/YRaXiTgAAU=
Subject key identifier: 42:43:46:D0:9E:AB:21:3D:A9:2E:69:48:7D:7B:54:A1:4A:DF:4F:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22595A758BE2E3322AD03150C9088A038FF320CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17057de1-0841-47c5-9f52-f4f803d5e2d4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:59:5a:75:8b:e2:e3:32:2a:d0:31:50:c9:08:8a:03:8f:f3:20:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b3897ae252602c686531bf05d81162d84c863cc4091b1a78754c6bd02f87f663, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:92:4f:e5:5e:28:72:9f:8d:a9:9c:94:f0:
a8:95:75:f3:7d:bb:69:dc:e6:0e:31:64:62:be:82:
e6:db:62:5b:3a:e0:91:ad:eb:b2:1c:95:7f:98:ed:
87:7f:1a:94:58:bf:34:da:15:90:ed:ad:46:30:c1:
dc:a4:62:e9:19:98:ff:ee:a6:2d:d5:ab:95:f9:11:
cf:4f:ec:4f:2e:e8:31:d5:52:61:f8:06:3d:da:6c:
7e:35:1e:76:1b:49:53:7c:57:7a:44:88:16:95:5b:
fb:12:6b:0a:6f:80:e7:b3:5b:e8:9d:ce:b6:3f:bd:
08:5d:bd:e0:9e:c0:de:0c:02:5e:e8:43:31:fd:cf:
a2:92:28:1e:a8:30:b1:27:ec:ed:dc:df:5e:56:00:
82:52:fe:10:54:8c:33:29:39:b2:24:8f:b9:50:fe:
1b:51:a5:ee:75:8b:aa:0c:27:eb:22:f3:ef:0d:2c:
1f:bc:d3:1f:b0:bc:8e:91:75:4d:05:41:01:63:81:
7d:1b:82:9f:1b:3b:d1:d0:1b:17:64:ed:cc:37:2f:
46:29:f1:b9:76:dd:e4:34:7f:58:d5:c4:58:05:93:
db:50:51:b0:d9:2b:d5:76:e8:5c:5b:97:89:89:ea:
2c:16:a0:14:18:65:e0:43:61:e8:08:21:4e:a6:64:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:46:D0:9E:AB:21:3D:A9:2E:69:48:7D:7B:54:A1:4A:DF:4F:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17057de1-0841-47c5-9f52-f4f803d5e2d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
75:d4:69:fd:87:89:0f:50:e6:12:04:aa:13:c0:cd:d4:6b:cc:
7c:fe:c8:37:b6:a8:8f:e8:e9:d6:94:fa:0e:c3:74:0a:77:b5:
8f:4c:2a:0a:a5:7a:b0:79:09:08:cc:92:47:95:ff:c4:cd:38:
b1:fe:5a:b4:68:cb:35:75:4b:73:9f:2e:54:7e:11:34:cb:29:
6b:4d:07:0e:1d:33:08:f9:71:a7:6b:29:9c:e2:f6:b9:ea:ab:
42:04:a7:b2:4c:06:71:f4:0f:9f:d9:ad:50:6f:d9:e2:f3:73:
1a:a0:69:84:54:7f:2f:ac:83:d3:02:06:bc:88:12:46:42:74:
28:92:5c:ad:ab:9f:a0:1b:c0:1d:0b:cd:73:b6:b9:94:c8:b2:
35:fa:5d:65:c8:a6:80:9b:0c:6d:c7:34:d0:f8:f3:de:36:23:
52:bb:cd:3c:d1:57:a1:5c:d1:5d:95:43:a4:fe:48:b9:07:59:
33:c8:fb:74:9c:ec:e8:2e:49:ad:1a:47:c3:a5:9c:d9:dc:28:
ca:bc:33:22:6e:8a:42:c2:d8:b7:ab:09:51:67:23:a7:63:e6:
f9:01:72:74:84:dc:14:97:d5:fb:79:d9:ea:00:35:02:d5:0b:
71:59:0d:cb:9d:be:47:86:91:aa:a8:9c:53:12:48:36:d4:60:
9f:81:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:53 2025 by rpki-client