Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
File: 1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa (raw, json)
Hash identifier: bBQgB2OZstuA9KIXiZcmhofEte9f/A4VNe2GXIXQBW4=
Subject key identifier: D1:3C:07:3D:ED:39:62:19:60:98:DD:95:B2:B3:B2:6F:BF:05:30:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30DCE9209FFEEC3536A4F2798726B763200B04DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:dc:e9:20:9f:fe:ec:35:36:a4:f2:79:87:26:b7:63:20:0b:04:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7915b22c79e42e3b6dec1fc5d0feaef8a4b085ecd64b86fc1c24f63b36d085df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:51:85:5e:c8:6a:91:f1:78:99:05:51:c9:
ca:3d:b6:14:29:0f:81:d5:8d:e2:5f:a5:b5:7f:11:
85:ab:77:e2:66:88:b4:8a:52:8d:03:24:d3:ed:bb:
f3:cd:ba:54:2a:0e:d0:06:3f:ed:c2:9e:8b:53:7e:
72:87:27:62:15:d5:f6:b8:72:14:e0:f6:02:64:5d:
f8:6b:1d:16:96:72:01:51:76:c7:e1:a7:c1:a8:13:
41:23:62:0c:f5:39:66:02:04:81:2a:58:f3:09:31:
b5:94:0a:50:17:df:80:81:6a:77:66:7c:61:2b:97:
1c:f3:7f:7a:61:58:bb:ee:d3:ba:18:f5:46:62:d1:
c2:b3:aa:4b:b3:9e:f3:9d:78:2d:f9:ca:d2:72:42:
11:44:9e:cb:7b:02:bb:a4:62:0a:b8:e6:19:96:8a:
7e:ad:6f:26:2c:97:c2:89:28:1d:c5:95:c1:cd:0e:
da:2e:f7:8c:0f:4e:52:a7:e8:8c:ea:0b:11:2e:0d:
30:09:b7:27:cb:58:d1:89:3d:30:3c:8e:5e:c9:62:
8f:cc:ef:c2:35:d0:f2:fc:20:f9:5c:d1:7a:19:f9:
60:bc:e3:9a:a4:d8:53:e9:ef:73:ba:9e:e1:03:fb:
8d:32:2f:30:d5:25:fe:90:01:21:7b:71:de:b7:38:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:07:3D:ED:39:62:19:60:98:DD:95:B2:B3:B2:6F:BF:05:30:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4040::/46
Signature Algorithm: sha256WithRSAEncryption
a9:ca:01:79:a2:b4:11:73:84:08:e0:c4:9c:ec:9e:f6:49:24:
ad:75:c3:0a:7f:e1:e1:d8:d3:35:8a:a2:70:80:00:c9:44:ac:
73:7e:03:f5:a1:39:56:8b:af:ec:f2:11:c0:c4:7a:7c:28:e5:
7c:36:01:61:2e:6c:1e:68:c9:3a:8d:17:89:f9:b5:12:90:d4:
a6:7d:11:f4:51:b4:8a:52:4a:cc:6b:37:87:95:bb:d7:a1:0a:
6d:3f:f4:7d:7f:82:bc:ff:ab:5e:89:82:88:2d:e5:41:f7:26:
8a:59:d0:13:b9:c7:32:ae:86:5d:34:b3:bb:72:85:e6:dd:a8:
b2:9b:bd:4c:ce:e4:ed:4b:55:3e:32:4d:e5:7d:f6:e1:cc:8a:
30:5d:4c:45:90:2c:17:52:20:a5:19:b2:bc:9c:49:d5:97:97:
0b:d3:9c:3d:bd:13:70:e2:0c:92:1f:65:66:e4:70:86:7e:9d:
ac:05:63:68:30:75:9a:ee:a1:d8:5b:18:81:f5:e7:76:33:2e:
f5:34:15:e8:a9:19:20:38:d0:67:42:82:fc:b6:79:cf:28:f8:
28:84:10:43:40:14:38:fb:6f:91:36:1a:13:f2:24:4f:27:dc:
a6:86:29:3a:e9:3f:20:c7:3a:a0:8a:94:01:e3:d0:4d:79:ed:
61:b4:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:15 2025 by rpki-client