Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
File: 366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa (raw, json)
Hash identifier: VCk+9ZXJZGlvsaYYavK4Bi/QBBgK2JP4S0jD0eCHZx0=
Subject key identifier: 9B:33:71:55:46:42:52:98:1F:DD:08:53:00:07:C3:3A:71:52:6B:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A89C0159B7444C57B08A03DA16745A2A9FAA375
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:89:c0:15:9b:74:44:c5:7b:08:a0:3d:a1:67:45:a2:a9:fa:a3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=aa2bc82c7512dc891a3489b09fbc22c5989c8e2b89e00b7f5706aa78393c7664, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:2b:68:07:86:f6:8b:c4:3f:ba:a0:e1:7a:
c9:d1:e5:02:15:90:5b:41:66:27:69:bf:e5:a7:02:
1e:f1:3a:2a:8e:91:75:77:ce:de:dd:28:c9:59:4d:
79:7d:d4:7f:cc:81:fd:05:cd:2a:ef:4a:39:0f:00:
5c:fc:16:f1:a3:f1:6e:fb:27:f4:92:71:f3:de:77:
a2:e6:a8:f4:ad:50:7d:c9:3f:26:3b:16:7c:34:0f:
5b:7a:18:ad:b3:0a:89:02:26:fb:cf:1b:79:2e:99:
1c:6f:c7:81:12:2d:c1:fb:2f:25:94:27:1b:80:54:
28:ca:ee:f8:ef:27:82:8c:19:63:4b:37:6d:be:5d:
3e:7a:04:80:cd:b8:da:89:8d:2d:a5:9c:e3:f7:b4:
56:e8:47:bd:f7:2a:11:60:f4:0e:29:ef:01:1e:2f:
8f:8f:7b:e6:9b:e8:5a:86:64:8c:58:bd:df:53:9e:
e4:dd:84:a1:64:93:dc:a5:8e:7e:0b:56:4e:a4:01:
54:29:83:9e:b1:31:88:05:fa:90:81:6e:52:f6:26:
b2:23:3e:57:de:7b:4f:f1:b7:e3:91:73:98:61:05:
6e:7f:26:e0:44:2a:8b:ff:75:7d:e8:b6:b4:be:59:
d2:82:11:04:b4:05:c5:f1:34:05:da:7c:08:b0:c5:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:71:55:46:42:52:98:1F:DD:08:53:00:07:C3:3A:71:52:6B:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4040::/48
Signature Algorithm: sha256WithRSAEncryption
3a:47:d6:71:03:e6:c8:d0:5d:38:46:a1:95:a9:20:fc:7e:60:
4c:8c:dd:b9:92:f4:fb:15:01:f0:13:51:34:4f:83:a9:9c:27:
f2:b0:b0:95:ef:d4:ef:76:24:37:50:e1:13:6e:77:41:4a:9c:
3f:cb:0d:31:1d:51:e1:7e:59:8e:53:2f:05:43:fc:f7:58:d2:
a1:6a:c5:db:35:d1:da:63:16:91:0e:9a:e1:fa:b1:3b:26:7f:
31:c0:6f:a9:4b:62:6c:bb:86:6e:52:2f:13:2f:97:c2:8f:5d:
5e:2a:a2:4a:13:7d:0b:0d:62:bd:8b:88:94:45:8d:14:04:fa:
63:56:ac:22:18:55:1e:72:49:ff:4f:b8:3d:cd:cf:65:8a:c6:
c8:3a:67:25:d2:ee:46:f1:7b:54:3f:2b:67:cd:46:a8:f4:ba:
52:35:98:00:bb:ad:b9:ef:3f:2c:bf:67:58:5e:29:2c:17:96:
27:28:1c:5f:e4:e7:aa:0e:36:98:a7:7a:2f:4a:27:16:eb:b2:
9a:a5:24:d3:e8:c8:2b:69:7c:a1:f8:3f:c5:b4:6a:44:be:de:
b1:ab:a0:39:b7:ec:17:b1:70:6a:c3:d5:4a:f0:4c:2f:c9:2f:
0d:f9:02:b0:e0:06:87:bf:e2:a8:28:02:8f:9b:c1:e3:33:53:
c9:fc:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:53 2025 by rpki-client