Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
File: 19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa (raw, json)
Hash identifier: XlNluyx5LDqe9MYmXF+ye7334cnOnjeK8XtsYW40mUI=
Subject key identifier: DE:69:62:21:47:6F:8F:F3:A0:08:71:3C:9F:52:F8:9E:F3:F0:5B:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29C8D19401ACCDC173F5CBBBA2CE9F01B6DB4C70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c8:d1:94:01:ac:cd:c1:73:f5:cb:bb:a2:ce:9f:01:b6:db:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ec3260ea433497156c059d9ff4677cc3766ad2ac00aebb4cde5d55a8d3525278, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:36:02:0b:54:0c:84:24:5d:7b:3b:b9:5f:
30:db:6d:b2:17:41:ec:aa:8c:a8:26:74:f8:38:6f:
03:ba:8a:94:85:33:3f:a4:1f:2a:15:e6:8b:05:35:
53:d8:33:4a:d6:a2:bc:37:25:17:91:c7:6a:95:fb:
e9:af:5d:e1:f9:3a:84:ad:c9:9a:9f:e4:ea:f9:f3:
d4:fa:b7:3b:c1:26:c3:01:88:da:4c:d0:5d:26:44:
56:b2:0f:70:dd:bd:ab:b8:b9:cf:4d:59:80:0f:42:
e1:d4:9d:32:4e:e1:c7:7b:ad:39:dc:e3:41:02:85:
04:66:cf:2d:0e:67:2b:ca:0f:8f:93:44:45:cf:13:
77:3c:4b:68:6a:9c:a7:ac:ef:ef:d0:6c:89:03:5f:
10:dd:0f:24:3e:1b:42:79:9d:a4:10:e2:52:96:14:
bd:cf:81:54:53:cf:0a:ad:f5:e4:ad:8a:00:c4:43:
d3:a8:65:46:0e:21:ed:9c:34:71:c4:08:12:fa:c2:
1f:a4:6e:67:ed:6c:af:22:0f:10:f0:cf:33:d5:95:
aa:79:bf:0e:37:ca:4b:51:96:c7:b4:41:a5:a4:42:
54:5c:1e:42:84:80:44:0b:6d:46:05:81:fd:d7:e8:
c8:34:70:f5:c8:5f:0e:3d:b0:a2:0f:07:e9:a3:69:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:62:21:47:6F:8F:F3:A0:08:71:3C:9F:52:F8:9E:F3:F0:5B:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5080::/48
Signature Algorithm: sha256WithRSAEncryption
c6:3d:ca:f8:ed:ea:b4:8d:66:91:b6:95:39:51:bf:a7:06:f2:
00:d9:29:50:89:f5:0e:cb:53:30:2c:6d:89:ed:a5:e6:44:e7:
ad:13:2f:e7:aa:98:a1:b1:1d:dd:01:f4:cd:78:c2:ab:a8:4a:
45:23:99:21:20:37:0d:00:d8:06:dc:43:e0:a3:ab:c4:27:4d:
7a:0a:71:13:35:a1:40:41:d8:d5:cc:18:51:e8:38:7c:06:95:
a1:13:cb:ed:ff:22:7d:23:97:96:6f:ee:d0:de:22:69:7c:fe:
3f:ca:1e:7c:7a:65:c9:48:c5:f4:c5:cc:5a:17:38:67:b5:26:
b0:42:d7:83:26:32:74:4e:c5:b2:2f:7d:11:05:ca:e8:90:33:
fb:36:17:28:b5:a5:75:e2:e0:d2:dc:b4:cf:cc:4e:27:1e:94:
a8:a3:6f:c4:cc:ee:45:3b:3a:e9:b2:75:ce:e6:3d:09:6a:59:
df:eb:a8:ce:eb:70:40:7c:6b:92:d9:bc:f8:89:0f:dd:43:0d:
47:fa:a5:9b:2b:dd:dd:59:41:fa:54:66:dd:2a:41:f3:92:e9:
98:bd:50:0e:6b:40:c9:f3:6e:35:f9:d8:2c:32:97:94:6c:e0:
c7:45:ce:f3:b5:99:6f:96:77:79:43:fe:ad:99:7e:f8:21:6e:
85:23:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:38 2025 by rpki-client