Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
File: 28181159-5695-4944-b901-f84b836b4d8f.roa (raw, json)
Hash identifier: jgJrwXCi9QUbF39JN08u7ZIzfPoYjbqVxekMsrT+bQM=
Subject key identifier: 94:BB:1A:BF:D3:7F:0E:07:AF:C9:C5:B2:EF:46:FE:CC:48:3C:30:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3EBBC20C6F4FB5CCFC69DE4B42FFC625FF909B6E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:bb:c2:0c:6f:4f:b5:cc:fc:69:de:4b:42:ff:c6:25:ff:90:9b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4090b2bdd0bbd89887938e512749353676f196e7480e997f1ddee07228b6c079, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:6d:78:ce:ae:6d:cd:6f:7d:82:10:d6:a1:
98:e1:a0:a5:eb:34:1e:e9:7d:12:78:fc:e5:df:85:
19:cd:d4:e8:af:5d:75:ac:30:83:f9:7e:86:c2:ba:
d3:2b:b0:38:eb:97:4f:51:35:26:0b:f5:10:53:e1:
52:47:5a:d3:ad:ff:80:cc:41:46:58:b5:22:0e:bc:
99:2e:a8:ec:d0:c9:ea:02:a5:e0:7c:8e:b4:63:84:
39:d9:3d:ed:a5:99:6d:e1:e5:bd:74:7e:af:62:1c:
28:1b:8e:83:ac:66:eb:13:93:14:ea:78:20:1b:e4:
49:8e:51:01:15:18:aa:91:4f:89:2e:1c:bf:b0:68:
f7:80:4e:af:ec:64:a0:9f:21:98:7f:cd:df:95:36:
4d:e8:52:81:ae:a0:79:e1:58:42:b5:90:94:f6:1e:
54:f2:c4:f6:e2:8c:ed:52:5a:ce:47:78:64:d2:2a:
30:16:f9:9b:e6:7e:48:90:ca:4d:9d:53:29:d9:cc:
12:e0:7a:ac:ef:62:39:28:36:dc:aa:b2:c9:3e:84:
4a:cb:75:9d:58:14:12:87:6d:a0:d3:27:23:64:7a:
2b:a3:eb:77:dd:fd:73:bc:a5:50:91:43:4b:f5:74:
9a:54:b4:b1:69:30:9b:63:92:0e:b2:e6:44:3b:ca:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:1A:BF:D3:7F:0E:07:AF:C9:C5:B2:EF:46:FE:CC:48:3C:30:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:81:58:5b:c2:73:bc:21:63:6a:59:e2:6d:29:7d:91:ab:fc:
22:62:76:3e:79:cb:bc:d4:d4:10:ca:8f:ad:80:5d:b4:dc:c5:
d7:6e:7b:39:06:ab:74:42:bb:56:72:1c:fa:40:9e:e6:9e:25:
91:9b:15:41:bd:e5:20:91:cb:fc:d7:60:a9:c6:ac:b6:27:1a:
c4:86:e9:74:c6:14:78:f3:69:83:2e:12:6a:d5:59:f7:b8:0f:
ab:e1:1c:0c:c0:61:44:7a:a3:c4:f3:7c:77:74:14:ca:dd:e6:
8c:e2:bb:93:34:66:2f:cd:b9:91:1f:80:ff:30:9a:84:8a:a4:
1d:50:c2:a9:f5:f0:7e:06:2a:19:3c:72:cc:af:8d:35:dc:5e:
bb:af:f8:5e:77:01:b0:72:bd:4e:e0:60:a9:d0:49:bf:d6:ba:
e3:eb:ed:2c:dc:2e:4b:41:c1:87:3e:e4:77:85:97:3b:f3:f0:
8c:6f:a7:ca:1b:f5:cf:e8:c9:e4:fd:4e:e1:4b:5c:b0:09:1f:
d4:c8:fe:a3:6d:6e:dc:ff:2d:30:fa:90:2f:0a:66:ca:72:ec:
5a:32:4c:a2:07:12:9e:9d:90:b5:00:9b:60:a9:f6:32:e1:25:
97:d4:2b:25:ae:6c:5c:4b:75:e3:c7:57:7b:0a:e7:7c:e7:80:
c2:3a:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:07:07 2025 by rpki-client