Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
File: 25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa (raw, json)
Hash identifier: 1CGnFsTezu+0QL13EQhQv8d9Ie7+FqWXeTnyQY5yrIk=
Subject key identifier: 59:00:AD:40:ED:59:AC:8F:FB:A3:A0:41:2B:C7:1B:6D:A7:D0:78:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68E23464C2889350DB15B6A17301C9571341F669
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:20c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e2:34:64:c2:88:93:50:db:15:b6:a1:73:01:c9:57:13:41:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2951e067f377805b77c2ba2dfbd86f6547856f7df40e94dd1d8753fa2dd87e79, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:d9:5e:da:2d:c7:39:47:31:9e:74:82:be:
b3:38:b2:79:78:62:99:7c:82:c6:51:a1:17:50:bb:
9a:5a:22:15:6d:56:5e:86:27:46:fe:1b:c3:12:3e:
5f:db:76:c6:fd:ae:b6:17:07:ba:29:2b:f4:02:16:
1c:67:a3:bb:29:bc:b9:b6:ec:c5:bb:31:a5:ea:49:
e7:05:92:db:8d:41:67:89:61:26:e1:73:fd:22:c8:
e2:45:54:ca:9b:e3:43:d1:5c:80:1e:5c:f3:b8:2a:
92:3b:c7:7b:58:83:1a:41:fc:dc:15:eb:33:f9:87:
66:91:c1:50:48:af:b4:dd:70:40:59:28:57:1d:af:
2e:b0:0d:6d:94:7d:b9:6f:44:69:c5:c0:ed:97:9f:
db:ab:8e:97:e3:d9:5e:de:f8:7f:2c:22:b7:47:f7:
95:0d:e8:ab:8f:45:ac:87:46:45:33:53:20:66:ca:
1a:ec:66:e5:e3:44:cd:9f:96:47:3a:cd:c1:65:25:
09:58:ca:03:5d:5e:69:12:8e:5a:2e:5e:2c:e2:6e:
39:62:52:78:af:1e:f2:f1:50:61:1d:6e:04:a7:c1:
5c:9f:64:4d:55:9d:0a:05:8a:23:d0:97:f8:05:92:
a7:e6:e9:19:9f:3c:54:8c:a4:63:01:4a:51:f1:ab:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:00:AD:40:ED:59:AC:8F:FB:A3:A0:41:2B:C7:1B:6D:A7:D0:78:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
3f:f0:ac:c5:02:58:87:07:18:7a:66:e8:6a:f3:ed:2c:e3:f2:
9e:62:b9:b3:88:03:f9:93:3b:ad:6f:8f:a3:c2:1a:65:f9:bf:
e3:03:e0:31:f8:f9:43:ef:4e:c7:11:de:d6:6f:c4:35:9e:66:
52:72:89:97:9a:6a:1d:4c:b6:22:34:39:74:21:14:c9:42:7e:
0e:f0:b4:dd:eb:39:e2:51:35:22:e8:6d:4a:2d:65:c5:25:77:
79:20:3f:2a:5e:62:30:0d:d5:79:ee:5f:e2:f9:5a:37:8d:17:
6e:61:51:37:91:82:d7:2b:67:49:fe:61:b9:a8:17:b2:8f:fa:
a7:63:1e:f5:fe:5e:f4:cc:e8:1a:08:b6:62:43:b9:0c:e8:6c:
e8:82:1d:75:23:d9:93:49:91:20:15:4a:7c:b4:58:f8:84:90:
da:83:ea:a4:75:95:c5:db:9b:35:57:7e:4d:e4:e6:6c:24:2d:
82:bc:57:87:df:01:4e:2e:11:2b:de:76:d7:5d:c7:64:0e:e8:
af:cc:7c:c1:59:87:dd:5d:01:0a:3d:16:e8:52:7e:9c:aa:72:
0f:a8:c4:f4:d0:f3:fc:9f:35:13:23:6c:91:b1:1f:87:22:70:
79:bf:7d:2f:4d:3e:22:01:80:c4:bc:47:2a:6b:1f:92:47:e3:
61:8b:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:53 2025 by rpki-client