Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa
File: 35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa (raw, json)
Hash identifier: G7orH4nIPGxHRbkfoUZe00KOEk7Gn8cq/3K3Pvj2vts=
Subject key identifier: 28:3F:77:B8:3F:8B:46:DB:68:2C:0E:10:53:20:D8:2B:99:DA:2A:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4090860CCC5AFBA33AA58030D3203BF9516D80E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:90:86:0c:cc:5a:fb:a3:3a:a5:80:30:d3:20:3b:f9:51:6d:80:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8c73650d6e275b37e50f8886fdac1ccfa7fd70ace048e7a173fc37fac5c08429, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:f7:a9:40:e2:ac:07:56:7f:77:ec:cd:ef:
50:4b:20:57:f8:02:3d:09:b4:6e:ab:16:07:6b:b2:
e1:49:23:d9:52:ba:7d:ed:ff:a6:83:4b:bb:46:e0:
ea:36:c4:5f:16:07:9d:3d:37:08:d3:36:74:24:a7:
e9:52:1d:0a:07:24:c1:99:32:11:a8:8f:2c:2b:0f:
43:9f:de:cb:05:83:dc:42:ce:40:3a:7b:4c:2c:89:
85:d8:be:70:08:92:b9:01:97:44:0f:e7:36:c1:2e:
fd:9c:8b:1b:82:51:dc:25:c7:8e:e6:86:00:57:56:
96:63:b5:a6:26:a3:90:c9:92:d0:5e:b8:70:40:d4:
9a:04:00:7c:f8:64:4f:55:51:aa:68:cc:c6:f9:ed:
86:b7:79:a1:f9:43:61:f6:8e:1e:59:3d:af:f3:bc:
db:0d:ff:08:b5:12:78:79:40:df:16:22:20:42:d9:
6f:d3:c6:90:0b:21:28:be:56:a4:89:6b:d7:82:c4:
a8:b9:ba:61:3d:7d:7c:2c:43:f2:e6:6f:5c:1f:d8:
3d:87:78:87:c6:c7:27:50:2a:89:f0:4b:a6:ab:34:
90:d5:f0:ef:be:5d:2b:15:a3:00:d8:fb:f7:22:2c:
86:74:eb:6a:19:81:2d:d4:1b:5e:20:86:57:9b:e8:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:77:B8:3F:8B:46:DB:68:2C:0E:10:53:20:D8:2B:99:DA:2A:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019::/38
Signature Algorithm: sha256WithRSAEncryption
10:c0:18:0d:14:0c:9f:3c:00:73:50:86:45:57:df:9d:a1:50:
58:3b:20:03:42:ee:1c:1b:f8:1c:34:d0:c0:6b:cf:72:31:e0:
eb:83:8b:66:ea:1a:0d:ce:95:03:b5:cc:b8:28:25:96:47:b3:
41:c3:13:29:20:08:90:bf:84:a8:22:f7:f5:8e:fa:92:51:35:
16:38:4f:6e:3f:54:6e:42:5e:5d:01:cc:8d:6e:61:d1:fa:6e:
14:3f:84:54:53:19:a7:66:b9:03:7c:9c:f4:54:26:0f:67:ac:
8f:64:da:ef:a8:81:74:e7:dd:37:7a:06:f6:8a:11:e5:15:45:
cf:3b:d2:5e:d0:2e:d4:61:60:dd:a8:eb:69:f4:28:b8:aa:03:
e0:54:55:14:cf:bd:91:17:3b:de:a9:07:9c:93:5c:89:f4:9e:
88:ac:c3:51:ed:bc:79:7a:73:4b:11:29:20:4c:57:02:48:48:
0b:25:1b:55:99:71:69:62:18:97:ad:91:c8:0a:45:f6:38:75:
b7:c3:6e:37:d5:1b:5b:3f:2e:97:57:0d:14:62:02:49:f3:b8:
ae:a2:02:bc:d7:e8:e6:74:18:ae:49:de:81:43:2d:06:71:07:
b3:98:fa:b9:7b:56:ee:43:04:24:24:11:b6:07:41:fa:6d:49:
8b:9c:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:58 2025 by rpki-client