Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
File: 19a2984e-942a-4280-ac0b-904c9860af2f.roa (raw, json)
Hash identifier: 82ZB+y4HLmjPGCy9HlJW0sipo7kaPCstUFznrU8jmyw=
Subject key identifier: 43:08:8D:2B:25:DA:B0:90:98:1A:8D:36:6E:9A:F5:4E:BA:D3:E6:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 037A053C4D0DF4156C0C06BF470E6A712D926E20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7a:05:3c:4d:0d:f4:15:6c:0c:06:bf:47:0e:6a:71:2d:92:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ff65c0a525c07302862c213ab8c385eacced4f45438921d6a384b7bb8ced09d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:42:46:75:19:e0:6f:6b:c1:dd:aa:e0:7a:
cc:6a:59:5d:f6:57:6f:9c:54:50:bc:06:1e:94:6a:
0a:23:40:12:ae:8c:45:e9:29:a3:96:74:5e:4c:fd:
20:06:de:81:99:4d:f4:f6:a9:16:96:38:b5:8e:99:
31:9c:72:9b:b5:32:23:0b:cc:14:6d:be:34:94:25:
5a:d6:6f:8a:b6:16:21:f9:ab:e4:3e:a4:6d:42:25:
6c:30:2e:08:70:b6:ed:c7:a7:54:64:7d:e0:d3:44:
e3:59:dd:4a:2b:a6:4b:02:5e:f6:a6:7d:8a:4b:59:
7b:f8:c0:68:45:3c:3d:85:a2:e4:ab:b7:89:21:f4:
a0:b8:34:d3:44:78:83:fb:c2:e7:27:8b:2d:d9:c4:
b2:fa:cc:e0:ed:cf:ff:aa:39:97:70:41:e9:e1:d1:
db:b9:e3:3c:f6:2d:b8:74:41:eb:ea:93:bf:dc:2e:
0d:46:1f:48:8c:71:6b:22:af:ed:32:c9:da:91:06:
74:0d:9c:2a:21:d7:83:81:22:96:90:29:49:59:2c:
a1:d0:bd:0e:8b:ff:aa:4d:ea:c8:4b:75:e2:f0:fe:
8a:3e:bd:84:ea:86:bc:a9:0c:6a:a4:41:e7:a5:65:
5e:67:a6:17:8f:c8:13:89:79:51:04:c6:43:6e:72:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:08:8D:2B:25:DA:B0:90:98:1A:8D:36:6E:9A:F5:4E:BA:D3:E6:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8020::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e4:ea:4a:64:0c:0f:fc:d4:b0:2f:fe:97:9b:db:8c:72:d6:
95:a5:2e:db:3f:26:65:aa:bc:5b:1c:8a:f9:b4:8e:5c:dd:9f:
7a:2e:5a:cc:41:2e:b1:9d:78:06:5c:5a:9d:fd:5a:56:42:36:
b8:13:28:aa:45:5b:02:9c:ab:ef:87:82:3b:96:c0:49:ca:52:
c0:4c:6c:ba:a0:e6:cb:c0:2f:39:ed:03:dc:ca:5c:fa:d5:92:
3d:42:21:d9:61:a6:c3:54:0b:69:ce:98:7c:23:e4:25:3a:63:
89:b0:17:3c:9f:25:e8:25:79:50:c2:69:e7:da:bb:60:84:8b:
27:10:bc:fd:bd:78:f6:36:04:5c:eb:8d:b4:73:09:3c:45:e4:
4a:73:d8:d2:bf:6a:16:64:4f:8a:d9:b5:af:68:6a:af:76:ae:
6d:24:f2:fa:08:d8:f7:c7:05:66:d7:3f:59:4d:16:b9:92:86:
52:ed:6b:0c:5d:01:e5:83:07:ff:d2:e8:9a:4d:73:f6:a7:cd:
03:a0:cb:49:ee:d3:58:0a:1e:55:b1:11:08:64:ad:bc:dc:2b:
3d:fb:b2:b6:8e:fa:1e:9b:72:8e:a6:21:eb:f5:77:05:9a:45:
68:d7:4f:f1:89:75:6a:26:5c:98:5b:ef:48:de:73:e3:8f:4d:
a1:bc:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:13 2025 by rpki-client