Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
File: 38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa (raw, json)
Hash identifier: yBMMsPV5X/x+Al03vKnQxt/n+CmEnB1DYu26XR3QsMY=
Subject key identifier: 79:26:22:70:B8:68:6A:6A:05:83:C6:69:C6:E1:87:62:5D:E5:25:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E908E9366E7352B472C8549279E4D64B651016B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:90:8e:93:66:e7:35:2b:47:2c:85:49:27:9e:4d:64:b6:51:01:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=d8a4aa20c3eb72c5fb68b4a09716ad987a0fe795ae8761f9ac38a6765f3a5fd9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:58:75:af:85:78:b8:18:e0:ca:a1:52:8d:
c6:1e:f3:6d:c7:36:77:d7:bb:de:7e:08:61:57:82:
06:af:73:13:b3:18:86:7a:f3:3f:b4:7e:88:87:be:
22:3b:38:75:23:52:41:3a:4b:63:1f:8b:60:b3:34:
c5:59:2e:39:eb:ca:41:89:66:c4:77:a7:6e:e6:bc:
a0:af:2e:79:c4:ac:95:51:96:17:38:7e:e3:07:d8:
60:fc:a4:ca:40:b6:b7:a5:77:44:db:2a:e5:7d:36:
a6:8e:df:0b:33:27:58:f9:10:d2:66:ea:02:f3:83:
a2:55:0f:87:46:fb:b8:b5:af:34:44:98:d6:72:68:
bb:74:9f:5b:20:72:72:69:2c:d4:e6:a8:66:67:94:
88:e2:e6:f5:d5:15:5d:3b:93:f7:83:d2:05:99:9c:
30:31:da:43:85:e7:d0:1b:e5:d5:91:d2:34:53:f8:
6b:74:ea:f4:bd:7f:af:1a:1e:83:b6:dc:05:4e:70:
2c:fd:f5:8c:44:a0:6b:c2:28:1e:cd:64:7d:d7:bb:
4c:b5:20:55:d7:e1:62:e2:69:44:12:16:73:c8:34:
d6:13:e1:8f:7c:a8:64:db:cf:bc:11:a2:ba:b6:6d:
12:76:a0:d2:cd:da:13:6a:75:c2:7e:e2:ca:85:b4:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:22:70:B8:68:6A:6A:05:83:C6:69:C6:E1:87:62:5D:E5:25:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:6000::/40
Signature Algorithm: sha256WithRSAEncryption
b5:10:af:b0:87:22:bd:b2:23:8f:a1:f4:6e:95:a7:c9:ea:2c:
16:19:9a:0e:32:3c:f2:dd:9a:7c:de:40:f0:a2:44:90:df:cc:
bf:23:2f:b5:d3:a5:64:6b:dd:59:45:7b:02:a3:71:a5:10:b0:
6b:5f:74:47:0f:8b:4d:2b:7b:2d:3f:8b:5d:b1:81:d7:4a:d8:
8a:a3:a0:32:86:ae:55:6a:a8:7d:5a:68:bf:f5:c2:56:ee:46:
c0:2c:65:0f:f1:1d:2f:69:ec:6f:d4:21:31:4a:a7:e7:cb:77:
27:72:15:2a:a9:3d:4a:78:c0:09:85:82:7a:61:b0:08:57:b1:
6f:85:31:cc:d0:9f:cd:e3:71:01:e7:5e:d9:a8:06:e4:53:b6:
cb:5d:be:22:52:29:e8:5c:28:82:02:db:60:6b:be:5a:8f:3f:
19:d6:07:38:42:70:ef:c2:85:01:e6:46:e2:c9:6e:3b:df:92:
61:ef:6b:dd:d7:37:ae:ba:97:3a:d7:53:e8:0e:b8:ff:16:42:
df:8e:e3:74:de:bf:29:35:47:7f:11:be:c1:e0:fd:47:5e:14:
45:d8:f9:45:c8:96:6c:98:4d:30:15:fd:56:0c:64:8c:ba:fb:
a9:4e:2c:ce:b2:d1:a1:ff:73:72:ee:b4:09:92:d5:25:4f:2c:
54:4b:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:37:12 2025 by rpki-client