Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cee858e-c572-427b-8123-23b2e05abc40.roa
File: 2cee858e-c572-427b-8123-23b2e05abc40.roa (raw, json)
Hash identifier: gQ91xjh2RNdyypcyKvfuNIgFs6qBvcu3B1R+ZnNgogA=
Subject key identifier: 52:29:D9:B2:B2:63:88:1C:34:DE:5F:D7:F5:AF:BB:87:0B:21:27:89
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C9F500B2BB01B94E2A8009DB4C29FDD34F6F117
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cee858e-c572-427b-8123-23b2e05abc40.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9f:50:0b:2b:b0:1b:94:e2:a8:00:9d:b4:c2:9f:dd:34:f6:f1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0617af9986f70f53244a6f9df7e78397ce86cabf3d7a17e8c60c2eb286b24abd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:f8:bd:3c:16:d1:30:33:19:bd:30:9a:8e:
3a:1c:0d:42:c0:c7:7f:35:77:18:7d:56:70:39:6e:
d0:d8:66:00:47:6f:cd:65:14:5c:f3:7f:39:dd:fc:
0f:91:f2:21:13:b1:73:59:47:72:e2:28:0f:04:85:
3d:ba:62:46:89:45:26:27:24:5a:d6:1d:0f:37:c0:
10:b0:7f:4d:47:69:88:73:ee:b7:83:49:18:d1:26:
aa:90:7b:54:9e:a4:a0:78:8a:ed:63:82:5e:79:04:
72:3c:cc:e7:fd:ad:fa:5f:5e:bb:27:d5:c0:d8:8a:
ed:6d:e9:51:f3:32:26:53:c5:62:5d:e2:ef:b6:8f:
20:a7:72:3b:02:5c:cc:66:13:3e:ab:6c:d1:5e:b2:
c0:18:21:c8:ac:89:27:07:f0:7e:bc:28:7c:18:30:
8d:c3:77:c9:6c:d1:e1:83:76:b3:68:62:e9:93:0c:
5c:4a:ca:88:9b:43:e0:dd:69:b0:c8:5a:97:e1:9b:
f0:fb:4a:e0:4e:8f:21:7b:f1:c8:af:9f:c2:a2:be:
33:60:62:26:d5:ed:5b:8f:1b:65:69:39:91:91:15:
f2:43:51:61:d8:bf:3d:f8:7f:60:3b:40:80:52:02:
ca:61:a5:33:88:6d:98:88:61:a0:73:eb:0f:27:d9:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:D9:B2:B2:63:88:1C:34:DE:5F:D7:F5:AF:BB:87:0B:21:27:89
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cee858e-c572-427b-8123-23b2e05abc40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c080::/48
Signature Algorithm: sha256WithRSAEncryption
58:18:f9:37:02:00:59:0c:ff:b2:70:3e:86:5c:fd:a1:ff:14:
cc:05:02:8a:b6:86:e9:82:52:29:92:bd:44:98:24:ab:6f:2f:
35:2f:64:b0:24:1a:b5:1e:05:04:3f:38:4f:24:0f:21:1f:54:
3f:e0:8e:0d:b4:6d:81:50:5a:8b:99:ec:c6:03:ac:ea:dd:cf:
73:01:c3:fe:5a:d5:b8:e5:7e:cd:8f:c5:a1:62:2e:18:16:5d:
c2:4d:24:d9:ba:e9:0d:6e:82:27:8f:50:1e:9b:96:a1:11:cd:
42:d6:1b:90:b1:7b:c3:c6:b4:af:15:e6:4d:4f:80:ba:a8:45:
f7:0d:82:fa:8e:b3:60:1a:50:c7:52:6d:63:a7:55:9e:db:7c:
98:f9:41:82:ba:0d:33:e6:c2:e7:ab:80:2e:51:8c:95:be:9c:
34:16:50:80:74:61:13:a3:b7:91:b8:9e:91:11:70:ce:fa:45:
d0:b5:8f:eb:8a:d3:b1:c8:7d:38:d4:b2:d4:bd:2d:1b:45:cf:
39:79:0b:41:fe:9a:ee:82:47:3c:10:bc:57:d6:42:16:32:61:
38:b8:20:4c:5a:82:fd:9f:c1:5a:5d:28:e8:7a:d9:ac:92:6f:
a1:2a:7a:64:0b:f8:fd:b4:75:76:ae:71:cc:4d:88:fb:0a:b8:
79:da:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:24 2025 by rpki-client