Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/191b6a6c-2595-4848-a6b3-22a230649f67.roa
File: 191b6a6c-2595-4848-a6b3-22a230649f67.roa (raw, json)
Hash identifier: LtLti04CxpLkHeFnkMEKDDKxouIEck8PG+oOzHxoiYQ=
Subject key identifier: 97:7E:EB:5D:CD:86:78:F5:0D:56:B2:7B:48:81:D6:69:85:7A:9C:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F710464A43FE2EE95A1DC44AD61454037EEFDC7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/191b6a6c-2595-4848-a6b3-22a230649f67.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:04:64:a4:3f:e2:ee:95:a1:dc:44:ad:61:45:40:37:ee:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c71adbec61308e047d9d88e589ab8f0c71d8aa424e4133408a25b5f4b36da7bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:b9:1b:f4:b7:59:17:25:dc:ab:6b:51:e0:
07:28:7f:9d:0d:14:03:5b:19:c7:5b:9f:b3:2d:01:
79:96:f6:c4:93:b5:76:eb:da:1a:b2:73:f1:40:c1:
2c:3d:29:8a:22:70:f2:3f:6c:9b:77:a4:cc:7a:e4:
06:47:14:a5:94:86:77:f6:30:1f:15:78:b9:fd:29:
58:c7:e1:bd:85:67:a5:ad:d8:7a:93:99:60:8c:b6:
e5:12:fa:59:7c:ed:75:24:4a:1f:94:13:a6:14:6f:
3b:04:78:78:87:3c:ce:44:1d:a9:d2:a4:f5:fe:c2:
6d:e3:6c:f8:a5:77:61:e8:93:12:ad:c7:90:09:be:
5c:e7:f3:75:9e:de:48:34:16:bf:c2:5b:c4:81:38:
67:6a:e2:ed:18:34:15:91:6b:34:de:cb:00:43:01:
06:98:74:fc:aa:f4:e2:f6:ac:d9:d3:d1:ff:81:c3:
7a:da:d8:18:42:98:ad:ed:d8:1b:98:c6:82:d2:42:
54:f5:9c:97:24:60:45:e6:0a:97:86:a0:c9:ff:77:
a8:ca:ce:3b:e2:d4:31:48:de:53:f8:bb:81:ef:a2:
64:01:83:83:ea:86:e6:6a:95:fc:18:65:cb:66:c3:
51:f9:96:97:f8:0e:ae:18:3a:06:9c:20:fc:ff:ae:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7E:EB:5D:CD:86:78:F5:0D:56:B2:7B:48:81:D6:69:85:7A:9C:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/191b6a6c-2595-4848-a6b3-22a230649f67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5040::/46
Signature Algorithm: sha256WithRSAEncryption
bd:46:11:1f:08:d2:40:a5:f8:5a:1b:6c:57:a8:ed:b8:01:b4:
76:74:48:f4:0e:5a:df:a3:c5:0e:32:3c:93:2f:4c:0c:dd:e3:
26:bf:af:25:73:9b:84:08:72:8e:fa:c7:24:44:cd:75:fb:be:
a1:40:cd:eb:cc:a3:77:7f:36:e0:07:bc:08:66:89:1a:02:09:
8e:4f:dd:6e:91:0a:82:a7:7f:43:9b:fd:7b:41:65:6d:cf:72:
36:df:4c:90:32:f0:93:40:52:aa:26:28:80:b4:41:b5:7e:0f:
97:71:d5:7b:8e:e1:6c:ef:eb:4c:2e:2b:40:66:84:f4:0e:f7:
d2:d8:12:6c:67:20:fd:6c:de:d5:53:a2:83:34:ab:bf:12:31:
e8:6b:09:b5:fa:73:c5:0c:51:2d:37:bb:39:83:5a:9a:8c:fa:
3c:8e:f4:89:89:8b:14:3b:23:fd:0b:cc:e3:1b:1c:d0:65:4f:
a9:ff:9c:65:31:dc:e4:96:ac:31:7f:f7:11:e5:e4:07:43:22:
ab:0f:a0:56:44:7f:91:cd:59:13:da:02:92:10:76:18:05:d8:
8c:92:22:ad:77:f7:36:9d:11:c2:8e:ab:56:2e:01:ef:d0:1f:
6b:4a:bb:da:92:08:3d:9f:6d:35:6a:58:b6:11:57:9f:af:bb:
18:d6:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:43 2025 by rpki-client