Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
File: 3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa (raw, json)
Hash identifier: u3GXnkN4k0rsz6FScnEgwGbXNEMy6ynSIDEUFuyswXE=
Subject key identifier: 7D:C8:6A:D6:DD:D5:2C:D6:58:28:CB:BC:F2:94:24:CE:8A:8C:EB:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C479650AD4829E1F88BE46C094AE5D8AF8C57DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:47:96:50:ad:48:29:e1:f8:8b:e4:6c:09:4a:e5:d8:af:8c:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=04112093dfb2095286923583f5d842f0449cf260499dfdc44c278e4fd5bbd2b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:8c:78:35:07:e4:14:86:ad:04:0e:80:c9:
25:c1:a4:88:bf:49:49:59:74:6e:5c:8d:b2:94:61:
37:2e:db:82:0d:c1:91:29:a0:9f:98:f4:42:b8:ca:
3e:c2:eb:d1:6f:6e:b8:66:75:68:70:8b:c0:7b:2f:
c0:fd:90:68:d3:dc:1a:b7:af:49:cf:4e:ea:90:14:
d6:d8:e1:f4:b4:74:6f:4a:c0:37:c9:95:36:7f:1b:
3d:48:fc:74:57:16:91:53:94:39:55:be:45:40:82:
a3:db:b4:2a:22:97:0f:ca:d4:9e:11:36:84:26:46:
7a:9b:87:57:1d:67:dc:3f:c5:59:71:3b:a1:76:29:
f4:e7:62:09:a1:49:ab:e9:1c:78:20:fb:58:1b:51:
a3:64:e8:57:ca:cd:db:e0:03:89:8a:cc:4c:48:79:
9b:d5:e2:e0:1d:5d:21:6f:73:83:33:15:45:83:b0:
5e:8c:95:05:97:72:89:1a:3d:74:f4:89:7b:3f:a8:
9a:ed:d8:43:df:87:42:14:6b:98:4b:5f:71:02:2d:
ae:f0:6d:04:c9:88:82:5e:ac:ef:58:6b:6a:b7:aa:
32:76:97:b7:07:fc:65:18:d1:4d:8a:35:93:f6:fd:
80:16:01:d7:ae:ec:b1:47:6f:fb:44:df:51:63:a7:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:6A:D6:DD:D5:2C:D6:58:28:CB:BC:F2:94:24:CE:8A:8C:EB:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
52:8d:43:ff:0d:ff:42:cf:8f:9d:65:60:da:e7:cc:f7:21:00:
77:e6:8e:a1:d4:18:e0:4f:3c:e9:f2:db:ba:1d:a6:b5:3f:47:
34:9a:65:ca:a4:4e:6c:49:be:d1:ac:98:e7:53:13:75:31:c0:
b6:df:88:f1:52:af:ce:6a:f7:3b:2e:2d:5d:f6:37:01:e2:7a:
5f:09:ca:ec:49:87:c0:1b:ac:3d:84:04:6d:a6:de:29:dc:2a:
ad:6e:a8:81:cb:2a:f7:9f:d4:aa:6a:c6:71:c7:76:4d:66:65:
62:c2:8a:6e:a5:50:06:f6:58:eb:cb:8b:95:4a:d7:10:eb:d6:
a2:43:ad:bb:56:85:14:52:b4:0f:83:d6:d8:53:65:57:52:cb:
4f:44:58:85:07:77:b1:b1:57:6e:a3:ce:0e:c9:e0:39:c2:b3:
b8:23:fd:50:58:e8:1c:74:72:f4:5f:98:76:38:88:8b:0c:d9:
34:2b:52:9b:6a:07:39:07:87:01:f1:31:23:d4:74:ab:16:e5:
7b:5d:bc:bb:68:13:3d:d8:26:69:2e:34:1f:83:4c:5f:43:9f:
0a:36:4a:9d:61:81:cd:d9:94:75:d7:32:fd:b3:bd:19:20:bb:
e1:d5:aa:8a:5a:45:76:44:5a:91:09:a9:51:0b:49:e4:fc:85:
e4:5d:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:07 2025 by rpki-client