Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1aa38486-cd53-4f48-891d-a0191edf04a1.roa
File: 1aa38486-cd53-4f48-891d-a0191edf04a1.roa (raw, json)
Hash identifier: UcQtG4S0GGhF9ggwrcabFYiAgfQ337PfN7zocO779+Y=
Subject key identifier: 2B:E4:48:DB:9C:76:4A:5B:89:25:F9:0A:9E:2E:69:12:8F:86:43:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 392BA1D425BEE03737F907B7504B40BEC1589F9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1aa38486-cd53-4f48-891d-a0191edf04a1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:90c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2b:a1:d4:25:be:e0:37:37:f9:07:b7:50:4b:40:be:c1:58:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=fcb7dd7b6f537f7167b5de083e66ad4d1e3b85147a4c45b75ce6ff29df871c69, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:5b:03:f7:c9:59:38:5e:f6:1f:1b:ff:40:
4c:1d:88:ce:e2:b9:c0:eb:3a:8a:88:c8:d0:6b:19:
c4:1a:d0:1f:18:70:a4:f4:ef:1e:c1:79:97:28:e0:
f4:e4:f6:15:26:39:25:b3:18:09:d3:59:8a:14:f6:
38:d0:0e:78:27:3e:89:c6:ae:9b:c9:00:9f:7e:64:
3e:5e:e2:2e:a0:19:11:9d:7a:72:b0:a4:7b:f1:f5:
3b:e3:f8:7d:01:f4:b5:f1:ad:28:e6:db:f1:8d:0e:
03:87:9b:76:5b:f9:08:f7:9a:0c:c8:33:f3:7d:99:
98:dc:51:30:2d:37:94:07:45:6a:c9:e9:09:42:94:
98:80:d6:58:ae:b5:30:46:98:db:cc:0e:14:75:bb:
98:05:37:bc:be:ce:cb:1a:79:23:81:0e:04:14:2b:
bc:ff:24:be:c3:0c:12:de:bb:f9:b5:dc:22:c5:9b:
f6:8f:f6:4f:e4:e1:e2:79:2e:f1:4c:08:58:38:af:
7b:31:45:41:ef:e4:3c:39:26:bf:13:13:ac:7d:aa:
6c:3e:aa:d8:8d:4b:76:09:3a:68:3a:1c:fc:a2:b0:
97:c4:b7:60:da:55:5c:b6:fa:00:7f:ab:e3:18:b6:
c2:a2:25:e7:48:a3:77:08:fc:6c:a0:b3:fa:89:0d:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:48:DB:9C:76:4A:5B:89:25:F9:0A:9E:2E:69:12:8F:86:43:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1aa38486-cd53-4f48-891d-a0191edf04a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:dd:42:20:a8:22:cd:75:f8:78:97:8b:94:58:d4:5d:d1:83:
8b:e0:a7:28:54:f8:99:bf:46:45:51:e9:f8:e0:be:7a:ef:db:
a7:3f:a3:2b:c8:ca:49:02:10:51:d8:f1:b0:e9:10:7d:fa:81:
2d:fa:5b:26:23:61:fd:c0:08:fd:54:54:65:ee:60:45:04:a7:
e7:be:15:8a:e5:43:d5:af:67:d8:d9:e7:ec:af:65:66:83:64:
a0:d8:4b:66:4a:aa:a2:14:94:2e:83:a8:44:3b:2f:15:5a:88:
62:31:30:3b:6f:27:df:72:9e:a2:78:7a:82:aa:93:71:d8:f4:
10:68:7d:ae:f7:d7:1d:02:d3:32:db:26:6d:f0:e9:3c:66:3f:
8f:d4:71:fd:aa:67:a6:71:72:8c:de:ad:07:cb:ba:b5:8b:26:
cb:67:6c:7f:7d:f2:8b:f1:11:ff:5d:2c:19:22:4b:c4:c9:46:
37:8c:bd:8e:ae:34:0a:0c:25:1a:7b:d9:b5:5f:cb:25:33:f0:
27:a8:ee:61:47:0b:d0:66:b6:3f:f5:aa:25:d3:4b:69:89:77:
26:9b:3b:bb:75:41:56:d6:9a:a9:2a:0b:6f:fc:b8:1a:9d:e3:
47:81:99:3b:ba:41:94:62:ac:42:08:71:d4:cd:a2:72:05:79:
c4:7b:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:14 2025 by rpki-client