Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/288fb7c1-6c49-475a-9dd0-2637b4e09492.roa
File: 288fb7c1-6c49-475a-9dd0-2637b4e09492.roa (raw, json)
Hash identifier: WmLNQyQNR0ugOSqQ/1T2BAiHIUauJki+edBbIKeVtMU=
Subject key identifier: 66:8F:93:1D:C9:0E:2F:A5:E6:78:BA:CF:63:E9:59:7C:C2:2D:BA:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49911EEC76DE793AAC80740F30C50EE50A03F724
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/288fb7c1-6c49-475a-9dd0-2637b4e09492.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:91:1e:ec:76:de:79:3a:ac:80:74:0f:30:c5:0e:e5:0a:03:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=28c0f048288e98f5f19ba83e5b622c598d07c8af01c190c2412a9cc11b94be1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:72:bb:09:1a:53:55:10:96:be:ac:3b:0d:
ae:16:d4:cc:07:04:b2:9e:f8:e7:6e:d6:97:21:bc:
63:c4:22:fd:33:49:71:dd:31:cb:98:f9:27:0d:ca:
8d:0c:51:88:07:0e:a5:3a:fc:b1:d5:5e:a5:38:df:
b7:0d:ce:be:65:14:93:a2:4d:6f:57:63:c1:0a:b2:
02:1a:bf:f9:9f:b9:d7:f3:67:48:bb:60:60:da:38:
32:84:73:73:74:f1:18:ff:84:35:54:92:9b:ec:d9:
bc:bb:09:a3:e4:a4:ec:25:72:bf:7f:45:4b:c3:21:
f8:21:ae:71:b1:16:22:75:40:ee:a7:35:71:71:f5:
13:37:40:2b:69:7f:42:72:77:84:c3:90:0f:17:a3:
18:8d:a1:a5:cf:5e:31:42:1c:f0:8a:d2:b5:ad:fc:
c4:09:8e:8d:29:e0:6a:bf:76:59:b5:c0:dd:02:74:
de:65:dd:35:ef:76:a1:b4:ce:73:45:cf:d0:c3:43:
cd:80:2d:63:99:fa:cc:7f:ee:cb:54:d3:e6:bc:a7:
53:ed:c3:b5:71:d6:5c:58:c2:83:1c:ba:7f:7e:9e:
98:e3:87:d3:6c:f4:d5:e6:c3:cb:b8:95:5a:6e:56:
8f:b1:ec:1e:ee:83:b6:41:44:f4:10:dd:fc:8e:c1:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8F:93:1D:C9:0E:2F:A5:E6:78:BA:CF:63:E9:59:7C:C2:2D:BA:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/288fb7c1-6c49-475a-9dd0-2637b4e09492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e:400::/38
Signature Algorithm: sha256WithRSAEncryption
2d:5a:87:fe:74:98:19:54:fc:6d:fe:89:d7:d4:98:4b:59:e4:
cc:1f:be:c8:ee:06:1e:67:8b:47:d1:07:1c:83:35:01:b5:9e:
0f:61:a7:5d:30:9c:6c:1f:43:24:0c:97:6a:be:21:c7:cf:1c:
b9:f3:41:a6:9b:09:86:7c:a7:75:e2:9c:71:e1:bd:90:b9:97:
55:9d:e1:74:3f:84:26:ac:9a:fa:50:b0:8f:a2:56:23:43:cd:
58:cf:e3:09:da:57:0f:41:4b:bb:24:8f:6e:12:57:5a:3d:01:
d4:1e:70:fd:fe:32:3c:1d:d0:39:60:b3:dc:4e:e8:64:48:a1:
2b:5f:00:a3:d5:f2:4a:18:8b:21:b1:ef:77:b9:8d:e4:bd:ff:
cf:3b:a8:8f:10:5f:6c:8c:0d:80:fe:d9:24:e6:d8:e5:4e:42:
b7:59:a6:94:99:21:86:3a:dc:2c:dd:80:14:58:db:2b:a0:c0:
6f:93:18:21:b4:a2:0a:9f:0d:42:29:75:97:eb:4d:ed:2b:d4:
81:53:01:c3:eb:1b:bd:c5:9d:41:59:bc:d9:73:2a:0d:6a:05:
00:10:4a:20:94:76:9d:b0:4e:ab:88:c8:eb:8e:54:32:e3:3d:
92:49:cb:90:91:89:16:68:1e:4a:9f:fa:fc:9d:cd:c7:0c:c6:
1f:e7:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:57 2025 by rpki-client