Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2846cce8-8219-4608-8452-5c6e931026b5.roa
File: 2846cce8-8219-4608-8452-5c6e931026b5.roa (raw, json)
Hash identifier: G/O/qV+m1prbQ1uHZBBHwtEvP61w7VtwzYe0vaSJfBs=
Subject key identifier: 1E:C1:67:0E:34:20:99:1C:B4:EE:55:59:D2:06:77:B0:55:6E:F3:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AFBBE52EB10B6F55E9B3E435297266B5C22EA1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2846cce8-8219-4608-8452-5c6e931026b5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fb:be:52:eb:10:b6:f5:5e:9b:3e:43:52:97:26:6b:5c:22:ea:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2bb33ffac79fbada215e0226c17446e749a32c616063940b567b7e812f2f617e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:85:ab:75:19:9d:f6:55:cb:ac:69:b5:6b:
4f:f3:ae:df:06:4f:4e:8a:4e:8e:89:70:1b:ae:6e:
93:d9:3c:0b:64:31:04:f4:23:db:a7:08:76:48:51:
e8:a8:b0:77:6a:79:de:00:9f:1e:7e:45:bf:61:ee:
5a:25:91:fb:1a:94:a5:fd:ca:a9:be:9f:7f:de:95:
d3:af:ba:3e:d0:21:69:4b:bf:d6:3c:4c:6a:b2:7d:
b6:fe:8e:06:cd:a6:d1:b2:3f:b6:5d:e4:17:e9:5e:
d5:9f:46:bf:e8:76:6c:45:99:85:13:f9:37:a2:6d:
a5:66:10:38:33:a2:07:19:33:24:b9:8f:46:e8:47:
37:a1:6b:36:81:08:de:6b:3f:a6:40:65:37:b6:d2:
4f:47:5b:aa:1b:96:d9:07:89:21:cb:31:3b:f8:a3:
77:e1:a6:f1:8f:13:33:6b:35:53:3e:c0:af:06:39:
09:af:08:7c:66:8f:56:fc:be:29:8d:00:8d:b0:51:
b2:57:76:3d:14:18:3c:b4:67:5f:80:ea:9c:3f:b7:
1c:b4:d0:62:27:00:ae:d4:8a:72:47:f9:a1:a3:78:
ac:d3:aa:1e:21:c7:bc:9f:15:4c:f7:85:11:f8:3f:
58:d5:58:60:11:c9:92:96:9e:dd:5d:c4:34:48:f0:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:67:0E:34:20:99:1C:B4:EE:55:59:D2:06:77:B0:55:6E:F3:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2846cce8-8219-4608-8452-5c6e931026b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:4080::/48
Signature Algorithm: sha256WithRSAEncryption
22:5f:f6:16:80:2c:0e:59:5b:49:6e:c6:9d:8b:fa:ef:ea:f2:
af:e4:0f:61:b9:b6:03:72:a8:95:2e:08:d3:df:50:80:20:2f:
ab:0f:76:fa:cd:4f:36:90:8a:94:23:dd:06:5d:6c:52:f6:e4:
33:da:a1:82:4d:8b:1e:da:07:2c:6e:34:07:ce:0d:c7:ad:96:
e6:ce:92:f3:21:72:dd:c2:38:55:ff:1f:5d:7b:a5:97:11:ad:
0e:46:bd:32:06:6d:a0:15:d9:ea:33:4e:9e:57:2a:02:6f:76:
77:b8:99:19:4a:d0:3a:2c:cd:44:78:27:e1:44:e9:a0:a1:fd:
77:0c:b7:45:1f:2d:db:ef:a1:13:73:58:f0:b3:62:42:1b:df:
5c:15:d9:5c:00:05:04:34:71:41:00:79:f3:52:70:f3:a6:c6:
28:e7:a7:19:6d:7f:5e:01:2e:ca:70:e1:7b:20:12:91:33:9d:
c8:20:3f:ee:20:29:6d:0f:f2:97:c9:2b:d7:ed:57:76:d7:0b:
a1:4b:b5:83:b9:ce:00:93:46:b2:e8:cb:9c:bc:9f:4e:6e:8f:
79:ec:6a:17:31:8c:47:02:d0:c4:db:03:9f:c3:b2:aa:e5:79:
8c:48:e5:8f:93:55:d0:2b:99:df:c6:ea:9f:b4:1e:64:41:0d:
aa:19:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:23 2025 by rpki-client