Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/230141cf-8fb9-4d99-822f-f358fb907650.roa
File: 230141cf-8fb9-4d99-822f-f358fb907650.roa (raw, json)
Hash identifier: x/ShWj5YVXU03LuRZXXuZk0hRWWG93rZ6kz4YwGmZ/s=
Subject key identifier: 68:6A:B6:99:C3:04:8E:B3:F1:3C:07:04:B0:3B:25:E7:34:76:F5:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3423C315D5138228AEB85CDFA6D300E70B4732BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/230141cf-8fb9-4d99-822f-f358fb907650.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:23:c3:15:d5:13:82:28:ae:b8:5c:df:a6:d3:00:e7:0b:47:32:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7a29152a0b0829a72adce7cf21950802c517adb791d587a86938eb4123798c78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:42:68:12:98:2e:0d:43:59:d0:25:cb:10:02:
c0:2a:34:8c:fd:55:db:68:57:29:28:f6:9e:27:83:
10:c3:e4:59:7b:a9:1d:48:63:19:88:2f:ae:5c:8e:
7f:56:ef:39:a8:b7:38:7d:0d:20:a9:22:6a:4e:b7:
0d:10:45:51:ee:c0:31:0b:64:00:5e:b5:8d:86:cf:
96:48:ac:c5:22:80:83:c3:cc:d4:87:60:60:4a:d7:
23:aa:08:8b:40:9f:c5:a5:66:3e:f4:76:d8:49:90:
1a:ab:f2:5f:83:41:63:7a:64:f6:5a:23:00:90:77:
6a:cc:ab:f4:d7:51:04:7d:da:5a:53:58:99:ff:97:
6a:88:56:91:96:0d:1f:bc:42:98:56:de:4c:6f:da:
62:4a:17:67:68:a5:53:1b:a4:87:fb:f7:5d:1b:12:
91:91:f3:06:57:c1:a9:01:98:11:3a:80:58:29:9c:
66:30:bc:aa:72:1c:b9:96:e4:00:ef:cf:cd:8f:67:
c6:3b:d4:ae:30:2e:a5:a9:5b:62:91:11:88:62:21:
bc:45:13:d3:6b:87:58:5d:d7:b8:c0:5c:79:a5:ab:
b6:8d:54:a5:be:6a:e2:19:3f:97:ef:aa:f7:aa:8d:
16:d7:1b:21:96:41:ea:0e:da:fa:a7:f8:b7:9c:fe:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:B6:99:C3:04:8E:B3:F1:3C:07:04:B0:3B:25:E7:34:76:F5:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/230141cf-8fb9-4d99-822f-f358fb907650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6080::/46
Signature Algorithm: sha256WithRSAEncryption
4d:b8:be:b2:45:b9:f6:c1:8e:a2:f7:a0:94:ee:d4:18:71:dd:
fa:01:d2:a7:31:b0:85:00:14:d6:e1:21:10:f0:d1:20:92:6f:
85:61:28:cc:ea:99:22:63:bc:58:cb:4e:44:b0:b2:e4:a0:3c:
b3:df:6e:54:2c:9a:48:8b:9e:f1:06:4d:41:06:6d:8c:3c:ae:
2d:da:3a:e4:01:77:fd:bb:36:86:cd:80:d8:0e:07:ff:d4:8c:
a9:93:6c:7c:06:00:b4:81:50:62:52:ff:4d:64:82:e3:5e:07:
dd:5a:d2:9d:3d:04:1a:c5:5a:01:0d:fe:cd:d0:ac:80:9c:7c:
34:c9:f5:26:b4:57:9c:b3:9e:a3:8b:76:c0:ba:21:ff:9f:cb:
d8:a0:d4:5b:a9:56:8f:eb:9a:2f:bd:39:a0:15:05:2c:f8:ac:
2a:dc:a5:b4:1d:d0:4b:4c:57:f8:1d:5b:d6:29:20:6c:d5:5a:
a6:d2:78:4a:f4:d0:53:ae:af:8a:5a:df:b5:ed:cc:08:b5:55:
4c:ef:50:6c:96:2d:c4:1a:08:17:17:b6:46:c3:40:87:c9:ea:
83:fe:2c:99:04:ff:f4:f1:0a:e6:5c:30:68:4f:8e:1a:ae:59:
c5:12:16:b6:06:1a:b9:0d:fe:cd:85:e5:95:e8:b7:09:48:62:
6e:36:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:38 2025 by rpki-client