Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
File: 301d1d15-dd00-41e7-9f44-49159e46a51a.roa (raw, json)
Hash identifier: 6PR0LAUz5YHo3cWBcWtm5dNHNayDICknUMd1eEP2bJA=
Subject key identifier: 4E:71:87:47:3E:C7:5B:C0:E3:5F:79:8B:AE:6B:B7:47:3C:54:78:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E19D6A34091C2A8640DDC7A8831A299BF717498
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:19:d6:a3:40:91:c2:a8:64:0d:dc:7a:88:31:a2:99:bf:71:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3b655964f60127f3ed3e0b8acfafc20c844ba9c430783d0f3f36a4e6dbe39281, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:5e:60:c6:fd:e0:7e:19:b2:11:0a:14:7b:
20:c3:05:fb:88:ee:36:da:0c:59:4c:a2:18:c9:7f:
78:15:cd:0d:15:24:55:d2:08:83:bd:f5:b5:64:a9:
ce:54:e0:80:55:33:40:1d:53:eb:40:c1:71:e3:c4:
87:dd:ba:eb:67:56:8a:a4:60:c8:ea:49:58:51:40:
d5:6f:8a:13:46:01:14:d1:9f:39:a3:36:7d:51:8b:
c4:55:c5:e0:25:d0:b8:8c:56:36:6a:30:c4:0c:9f:
43:8c:93:7d:80:2a:e6:20:1f:89:5f:2d:5a:9e:a4:
77:04:98:56:5e:88:2d:05:59:37:30:f0:3c:8d:38:
f2:cb:57:e6:2a:a8:f8:72:fa:98:f7:ac:d3:18:a3:
c5:2b:94:ab:4b:bd:02:6c:8b:3c:49:06:cf:f7:55:
ea:2d:c7:8d:a0:0a:5b:53:b9:31:15:cf:34:27:b9:
67:46:c9:7a:8c:3d:d2:19:d7:9b:cc:53:5f:69:59:
91:4a:fb:2a:5a:6b:fc:2c:ab:ef:d9:c4:30:d4:7a:
d5:6a:ce:2f:45:64:45:63:5c:b7:a2:93:ba:d9:06:
c4:90:d6:dd:ab:56:a9:0f:53:33:68:9f:44:39:10:
94:35:30:d7:84:56:7d:1f:43:88:a4:2f:d1:e1:45:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:87:47:3E:C7:5B:C0:E3:5F:79:8B:AE:6B:B7:47:3C:54:78:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8040::/48
Signature Algorithm: sha256WithRSAEncryption
70:81:2f:99:23:da:13:be:f0:c6:05:d0:de:38:e4:95:3e:10:
4f:e7:e8:e1:4c:03:70:84:3d:e4:02:f1:5b:20:97:f8:3c:0f:
a9:db:87:06:2a:8f:75:26:73:6b:44:2e:0c:64:e9:8f:a4:a9:
98:dd:9b:37:f0:22:68:13:9d:05:90:da:23:35:18:ba:e8:68:
c2:32:0f:97:53:9c:87:b5:b5:fa:c6:a5:62:1b:37:51:ea:f9:
27:90:6b:47:8c:a2:86:9d:d1:ea:73:46:3c:f7:a4:4a:87:db:
88:33:95:0f:d6:aa:64:6a:08:36:c9:84:0e:6b:88:38:f4:25:
83:f2:e4:a3:7b:5e:94:74:7b:18:00:0c:49:81:58:cd:7e:3e:
6b:c7:20:36:73:2f:2a:37:b2:5f:73:c6:27:37:fd:f5:cb:d0:
98:7b:83:0c:a2:c7:93:92:c7:e5:23:c4:41:52:44:c6:71:41:
fb:f9:6e:c3:3f:9c:26:74:32:e3:6e:df:bc:12:18:35:91:bd:
3b:e4:81:28:33:e0:dc:a5:b5:23:ea:c9:e4:da:19:c3:ec:50:
dc:4d:97:56:23:43:f9:a7:04:62:d1:05:7d:0f:1c:fe:de:bc:
69:87:68:35:15:be:88:32:03:d6:e3:4a:74:41:d2:5f:fc:f1:
80:6a:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:03 2025 by rpki-client