Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
File: 3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa (raw, json)
Hash identifier: fJkVizTlCMyYYhHCyazt6+RIuMpw2mWrgDIyLJKAtjM=
Subject key identifier: CF:ED:D2:B5:83:E0:35:CE:BD:B2:6C:21:BA:07:AB:2B:1E:F0:66:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C7730AE3CE8812DA08CBB48B0B60B3D262E2DF0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:77:30:ae:3c:e8:81:2d:a0:8c:bb:48:b0:b6:0b:3d:26:2e:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=33a66eb1e8df0458224700f9120abe7499f3ace420eec329686fda46a66504aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:41:60:da:4f:ec:91:39:f0:d5:06:d7:0a:
4a:94:78:00:76:fa:2d:30:3d:dd:a2:3c:76:fe:6f:
22:fb:e9:e9:be:9f:f6:9e:49:3f:40:a7:d1:66:a6:
e0:a4:5d:7e:e7:50:fb:27:47:13:f1:28:d4:35:6e:
3e:5a:40:dd:37:65:d9:69:15:13:c3:eb:1e:5e:9f:
39:28:a7:69:e1:e7:4c:cb:ba:d1:aa:54:85:ee:c7:
08:65:44:5c:84:30:e5:64:18:0d:3a:94:9c:70:10:
f0:5c:25:3d:70:b3:2b:d3:6e:28:84:60:0a:11:f3:
d9:70:51:d7:1b:74:06:ab:0b:bf:12:66:f5:a2:cc:
6e:0c:26:5c:99:ff:02:dd:09:9e:4d:d6:7b:32:ac:
85:df:8e:0c:35:7b:2e:9c:03:43:52:11:38:61:fb:
9f:fe:1b:6d:72:04:dd:62:33:44:1d:f2:e5:05:35:
75:21:8b:47:7c:cd:92:d8:dc:f9:07:eb:e8:53:12:
fa:92:c5:d4:11:2b:34:48:c4:1c:10:f2:4a:7a:6f:
07:79:ba:91:54:94:c7:b6:5d:89:ff:bd:8f:30:f6:
c6:96:0c:7b:08:cc:73:19:dc:97:b9:5d:f3:91:ed:
5c:ce:13:ed:67:a6:26:d8:0c:be:8a:4a:8d:37:b5:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:D2:B5:83:E0:35:CE:BD:B2:6C:21:BA:07:AB:2B:1E:F0:66:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:b1:78:e6:7a:0b:de:84:52:a2:09:10:81:65:18:ab:9a:bd:
5e:3a:f3:e3:1f:8a:fc:16:1e:a7:7f:a6:8a:70:96:16:6e:cb:
94:24:85:1d:b4:d2:e8:d7:cf:f4:52:8b:a7:cf:27:ac:e4:c8:
b0:5f:c8:b3:56:0c:03:cc:f9:d5:f4:7f:7f:65:0a:ca:67:6f:
ec:e8:94:18:6e:00:02:1b:e3:09:0e:cb:ee:d8:cd:2c:3f:17:
a4:d0:de:f0:a1:bd:b5:84:9d:f3:36:21:86:d6:dc:d4:42:f9:
2c:c3:19:12:9c:ae:b5:11:2d:73:e9:c3:d2:7d:a6:3f:e1:00:
ca:3b:87:94:89:86:d9:e0:67:ff:76:80:b9:8f:9f:42:21:9a:
b1:7b:08:14:1d:7c:26:14:31:18:12:6a:5f:39:73:43:13:bc:
94:bf:5d:55:f2:3b:d1:9a:20:54:76:50:97:7f:55:bc:4f:4d:
13:be:cc:b4:1a:f5:b2:57:5c:e9:4e:b7:95:47:2a:58:03:35:
ed:c7:0f:c8:22:f5:26:80:f1:1f:37:fb:d2:0c:c2:6b:bc:84:
f0:17:b0:8a:5c:4b:0a:b4:e3:5f:c1:49:c0:8c:87:b8:04:b8:
5e:6b:ef:22:20:b0:d0:e1:cb:16:63:85:85:ab:09:f4:0a:95:
39:08:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:52 2025 by rpki-client