Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
File: 1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa (raw, json)
Hash identifier: Ynqb7DI1QSJiZ8rS22GrI1YLyvlwvEYMbNSCTkeD92w=
Subject key identifier: 74:48:35:9D:5C:BA:33:18:49:DA:BC:6F:B7:E8:A1:F8:7B:0F:7E:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C4ACE26EB5186D73995CAD4661069147EB60788
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4a:ce:26:eb:51:86:d7:39:95:ca:d4:66:10:69:14:7e:b6:07:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=106072a71aef9aa9ea96af45686da37cd43aa6d57140505db9b941ab8d097beb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:9e:ca:d4:72:ed:6f:07:14:57:4a:bf:cd:
06:9b:b5:5a:80:50:90:d3:2c:5c:26:6d:ea:4f:b4:
2a:92:3a:d1:65:f4:d6:10:f8:ed:15:67:b3:48:67:
ea:f5:89:30:1d:78:1e:bd:df:74:b7:04:55:f1:2b:
e2:c8:40:bb:0b:e2:cd:c4:b4:8f:a9:84:48:0a:78:
cb:a5:70:79:a7:bc:c4:fe:01:31:48:5a:77:cf:c5:
f1:b7:ad:4e:af:39:a0:e2:11:95:29:e2:65:e6:bb:
85:52:8b:ce:a8:af:24:4e:1a:00:fe:cb:65:33:52:
a7:3c:bb:87:00:cd:bb:71:67:a8:0b:37:f0:0c:b5:
c0:07:aa:e3:36:81:1c:8d:b1:b1:94:9c:b8:f0:4c:
43:40:3e:57:e1:9c:6a:e4:21:07:84:16:c4:85:84:
96:11:f8:8e:2e:25:13:fd:59:ad:d5:8b:1b:78:92:
d0:f1:73:ed:18:9b:58:6a:af:bd:21:e9:ac:b9:0e:
0a:1f:dd:05:ae:1f:51:44:37:c5:f1:84:20:68:5d:
8c:ca:be:14:3c:7a:00:9f:93:de:ee:10:21:a3:3d:
c3:42:ed:25:f1:bd:14:eb:1b:e0:fd:0b:c4:03:4b:
a2:dd:87:0a:bc:ab:e9:3f:c1:dc:fa:1e:9f:19:4f:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:48:35:9D:5C:BA:33:18:49:DA:BC:6F:B7:E8:A1:F8:7B:0F:7E:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d:800::/37
Signature Algorithm: sha256WithRSAEncryption
57:62:85:38:e4:5c:da:e4:22:9f:54:9f:c9:23:45:4f:96:60:
9a:0d:4b:38:c7:6c:1a:d7:27:cf:66:54:06:c8:67:d6:46:57:
97:3a:45:4d:bc:29:05:0f:2d:42:31:8a:1e:34:3b:f5:9a:b2:
bf:6d:54:fc:32:f1:c1:8b:06:99:d7:88:b1:a4:63:36:73:02:
64:ac:c8:2d:23:f0:d0:83:b2:a4:4b:24:66:17:60:c2:14:52:
b2:bb:fe:20:8d:71:e7:42:bd:1a:93:18:ea:0d:61:f1:03:d4:
d1:9a:58:ea:38:6f:13:c3:5f:04:39:a2:43:f9:f8:b3:70:a2:
d6:76:54:e4:b3:b4:dd:83:d8:aa:69:ce:e3:09:ac:06:98:bc:
42:b4:ee:8c:ec:44:44:8b:ac:bb:da:43:7f:41:8b:42:8d:03:
c5:80:33:02:f4:e4:f8:27:12:a2:6e:49:9c:fe:16:df:31:2e:
61:35:be:d7:7b:d1:ea:87:ef:77:1f:b3:ea:41:09:24:11:ed:
81:31:fb:8b:dc:60:18:5d:30:1d:97:69:fe:5a:d4:20:1b:df:
81:5c:c5:a6:5f:43:c2:78:8e:90:12:85:88:84:84:9b:a0:6e:
0d:83:d4:8a:0b:68:c5:65:28:ef:2c:d5:c0:c8:35:0c:8a:85:
c8:a3:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:27 2025 by rpki-client