Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
File: 2331f846-3447-4dea-ac7a-63323853ebb9.roa (raw, json)
Hash identifier: GlB1EpfI7IKYaJNpBhCft03zC8k3Td6qszc5/Fs7Rgk=
Subject key identifier: 17:26:AB:D5:77:2B:D6:37:89:7B:BB:7B:CC:14:8A:B1:E5:F8:C9:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09E68CFA0169E33B2A32BF8A50A3C0BE8B08896A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e6:8c:fa:01:69:e3:3b:2a:32:bf:8a:50:a3:c0:be:8b:08:89:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=2776ec735beecde93fc9076db8c174b1d447798de1d7dc86ac31ee72b106eb0e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:1d:a8:d5:d7:06:aa:07:33:6e:64:2d:08:
1d:82:69:3a:cd:40:a6:ac:4a:4a:bf:a8:ad:ca:03:
65:ef:c7:8b:e0:20:ce:ef:ae:d5:39:26:bc:a2:af:
04:81:9d:4f:0d:f7:09:2a:26:fb:9c:94:ae:4f:98:
a6:82:f0:bd:02:a5:e4:d9:75:14:99:6c:f4:92:c7:
3d:4e:47:74:46:6e:99:47:1a:21:24:c5:d6:36:cf:
03:14:32:eb:a3:d8:54:c4:6c:a8:90:0a:e2:ab:ff:
f8:79:d4:a9:32:0b:f6:de:13:3e:3f:f6:d3:00:6f:
75:35:ee:a1:32:62:68:bc:1d:a5:df:99:9a:40:62:
66:28:d8:ef:ae:46:92:44:46:7d:a7:4e:44:7f:7a:
55:e8:f7:64:62:49:2b:c7:b0:04:7a:0d:6b:60:77:
b6:b4:32:77:af:46:63:dd:ce:3c:4f:27:c3:14:87:
3a:2c:36:8a:ce:d6:93:bc:aa:14:4b:0d:94:d1:3b:
3e:7c:94:fa:12:10:a0:ec:bc:40:f4:58:ed:52:ed:
e7:9d:f7:6b:fb:b8:d3:7a:47:f7:1b:c1:03:58:d3:
6b:9f:4f:88:c2:c5:71:b3:50:06:c8:c4:30:a4:d9:
3d:73:99:f9:00:ec:58:a5:14:b0:06:2d:61:1b:50:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:AB:D5:77:2B:D6:37:89:7B:BB:7B:CC:14:8A:B1:E5:F8:C9:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
30:11:80:76:e3:18:4f:3a:12:a4:74:b5:e9:dd:3d:a4:8f:8a:
c6:63:41:8a:1d:04:94:61:b6:0a:f0:4b:bb:08:96:74:9a:32:
9e:ee:ff:80:13:ed:6a:cd:66:8e:93:ca:ba:aa:83:03:18:27:
55:69:46:77:17:3d:c3:74:47:80:09:df:26:0f:e3:bd:ea:a3:
3b:7d:21:4a:56:6d:09:4d:3b:25:d7:8c:5d:d4:8b:cc:b4:45:
33:b9:ed:91:d5:17:15:d5:eb:a6:a9:3f:5b:1e:0c:ee:e2:91:
86:8e:a0:c3:41:38:8a:c7:c3:c8:ba:a3:67:f3:02:e5:2a:a8:
1a:b0:f9:7b:4c:f2:a7:e5:e4:1e:0e:d7:2c:4c:35:9b:7d:da:
aa:03:8d:e4:5e:7d:f1:b9:c1:73:a6:7f:2a:78:c8:05:f7:83:
70:8e:20:71:76:17:d8:71:c0:c8:a5:af:15:26:fc:fa:fd:56:
ff:a2:5b:d1:d0:95:b6:02:78:8b:bc:2d:2a:f9:4a:35:07:86:
0b:04:17:08:d1:ec:af:c3:4f:92:37:6e:6c:d5:bf:f3:2d:c2:
e6:9d:af:2a:89:b5:71:48:b6:c0:ae:71:35:b5:bb:45:40:49:
ad:97:1f:3d:42:65:6d:4a:1e:e8:42:3d:0d:36:29:c2:f5:a3:
12:22:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:33 2025 by rpki-client