Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
File: 36e6bf1a-660d-40a9-a561-406ff743fc37.roa (raw, json)
Hash identifier: LBxbkzgz40HI1ZQ2LBWnK4vz0p9aK3JGEPRVrE9WWaE=
Subject key identifier: 70:80:74:51:BF:6D:40:F3:F6:B9:BE:3F:41:22:E1:F4:89:DD:1F:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 095A1EE28509288A885083EE977859B697C33771
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5a:1e:e2:85:09:28:8a:88:50:83:ee:97:78:59:b6:97:c3:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=160c123bc3904475c105c281d41adbf79e327350dcd44d259854948f9d1887f6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:4b:ed:3c:c7:2b:fc:97:b5:a2:32:77:e4:
3d:41:48:ac:11:46:76:36:d1:de:c2:b8:1d:45:eb:
52:0f:b2:d5:ac:cf:73:68:43:3b:d1:8b:2b:6f:a8:
bf:90:1b:03:f2:98:5b:f8:d2:25:98:be:06:15:dc:
1a:7e:67:7b:e5:9f:dd:eb:52:0c:a4:ec:44:23:33:
29:45:63:eb:5c:7a:bb:77:67:b3:d3:fe:20:a4:6a:
9b:01:57:90:f0:cb:d9:63:a0:c2:f7:b0:b8:19:3e:
4d:5e:d5:36:4f:bb:8c:9c:d0:34:9b:3e:67:7f:3e:
3f:4f:26:05:0d:1b:30:de:94:e2:a5:3b:6a:be:44:
ca:e5:ca:a2:4c:fd:a9:8f:bb:8f:ca:0d:52:cc:52:
73:42:91:9a:ea:57:57:2b:0b:03:8b:63:40:76:ff:
b3:93:f8:f5:c2:92:b2:6a:53:12:5c:74:d6:7a:62:
a0:c2:ab:d8:22:27:8f:55:76:82:71:a2:37:91:4f:
9a:db:a0:b2:c2:5b:ae:9e:7c:ff:0b:82:70:b9:e1:
b2:b9:71:1e:9c:08:67:12:3d:61:86:6d:41:a5:ed:
f6:15:7c:c8:36:29:f3:33:bc:ac:30:63:0b:ac:4b:
6e:f0:fd:c6:b6:e2:67:13:08:fa:0a:9b:5c:11:f4:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:74:51:BF:6D:40:F3:F6:B9:BE:3F:41:22:E1:F4:89:DD:1F:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:1000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:0a:79:b9:89:a7:11:cb:35:06:c2:0f:22:4a:29:8e:57:e9:
9f:39:dd:bd:f9:13:ae:cf:a1:66:b5:27:70:0e:cf:d1:09:aa:
0e:5e:ff:61:dd:fb:ff:3e:83:96:cc:30:5a:0d:41:d5:14:7c:
30:39:e9:e9:1a:62:ed:58:f8:13:65:b7:8d:34:57:61:89:a9:
fc:6b:0f:57:5e:93:9a:da:e5:f9:75:30:32:06:10:22:8e:f3:
4f:c0:9e:29:c0:ec:20:30:60:40:39:89:a1:c3:b6:15:5a:29:
4b:33:e8:62:72:5d:b9:8f:13:c3:86:31:53:04:5d:ed:a7:23:
1e:03:b1:82:f8:78:8b:13:b3:20:ec:f2:c6:6f:c4:4e:52:d8:
a3:10:e2:fd:1b:3e:13:5b:f1:2d:71:ed:d0:b7:00:81:c6:62:
ce:3e:91:45:43:e0:55:5e:e6:cc:28:f4:f6:68:a5:42:a2:2a:
6a:48:4c:23:0c:af:f4:bc:01:df:b5:9b:d8:18:16:22:0e:01:
22:9f:70:b7:dd:04:22:f5:8d:25:b7:72:96:91:12:f8:f6:65:
e7:1f:1e:a6:46:5a:22:25:a6:7b:ce:b4:18:80:21:f4:9e:d9:
9a:da:26:5f:68:99:6b:28:17:96:c1:48:98:80:78:da:57:a6:
43:c2:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:37 2025 by rpki-client