Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
File: 3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa (raw, json)
Hash identifier: xPx/mJKho+1XQ4ZSFynl8CxUvht1p7xyYmQFSw5B45k=
Subject key identifier: D9:5A:1E:56:70:C1:F4:3F:02:9C:36:A6:98:1D:25:68:B6:C2:66:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CDCAF7450FA357DF18F173C5535E693FB95CFE4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:b080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dc:af:74:50:fa:35:7d:f1:8f:17:3c:55:35:e6:93:fb:95:cf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1d34bf595aee4d55d2100b280d62fd35c08eb758c4a9345acc7c236bba1a25ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:5c:b9:15:24:6e:35:a5:c7:60:9f:2d:65:
7d:ff:6d:34:4b:01:d5:0c:58:25:0e:a3:79:d5:dc:
a5:44:d7:ca:5d:a4:ca:3d:5c:61:c8:58:ba:a5:89:
ce:8d:bb:89:63:f2:53:77:52:3f:bb:b7:d2:25:0b:
a9:d7:0e:cc:ac:82:1f:14:9c:5b:c0:77:38:15:08:
86:ed:2b:01:0c:11:43:e6:c8:c4:f6:76:a8:cb:80:
99:69:82:be:02:8c:b6:5d:a9:71:41:7d:81:99:9f:
e5:a5:c2:8d:fa:35:db:29:6b:51:ea:5b:36:2c:e7:
f8:0c:dd:4d:a5:be:b2:d7:f4:81:d2:1f:05:4f:e0:
4e:b1:ed:a6:1f:2d:16:b8:ec:6b:f1:b6:3e:cc:be:
4b:0d:23:ab:9a:91:d1:40:b9:72:fd:c7:53:7a:43:
20:8f:27:e7:4e:ac:b8:2b:bc:1b:3d:7d:34:0c:d9:
b0:1b:2f:64:40:1a:9d:65:5d:93:7d:83:0d:72:e4:
16:fd:8f:35:d2:c8:b4:8b:5f:59:d5:28:2b:2f:a9:
9c:5b:f4:72:b7:31:3c:89:77:cb:c4:34:f7:7b:1a:
15:39:7a:b6:6a:77:2e:1a:2e:c2:38:0f:29:3a:8b:
cb:bf:7e:79:84:b3:49:74:4d:34:90:70:e2:ba:f7:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:1E:56:70:C1:F4:3F:02:9C:36:A6:98:1D:25:68:B6:C2:66:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:b080::/46
Signature Algorithm: sha256WithRSAEncryption
2c:c1:d6:48:ab:25:47:52:4e:8a:4a:36:2c:95:eb:b8:38:b8:
66:1b:e1:c3:18:e0:09:96:80:c2:02:a9:df:bb:8d:d4:f9:7f:
56:ca:d6:92:f4:0a:32:03:19:96:79:a0:00:1f:ff:d7:59:83:
b0:fd:1e:e3:98:fb:61:2b:c2:10:55:4a:f1:9b:6b:44:1f:d8:
ff:da:29:3a:96:6f:55:bf:48:98:e0:c0:79:7a:ed:df:1e:57:
87:fc:5a:4b:bb:dc:20:8d:7d:94:5d:b4:d0:cc:67:0b:27:dd:
91:76:c6:f8:29:1c:d4:ae:c0:22:f9:c1:e9:15:69:e2:d2:76:
10:64:60:91:fe:a8:e0:d6:4c:fc:b6:c9:dd:df:58:89:77:18:
8e:0c:d8:d0:51:49:85:e7:2e:7a:7d:47:df:4c:5e:a8:fe:46:
86:87:d0:13:e5:7a:44:23:62:2b:88:b2:e0:46:3b:4d:94:55:
52:e3:d3:9f:15:aa:b4:f1:9a:70:e8:7a:1d:35:3f:48:f8:8f:
f5:18:ed:5b:1d:be:dd:bd:fc:db:9d:96:8a:73:24:8e:10:aa:
4f:96:ab:c9:9e:e7:30:e8:91:a5:e3:d2:b4:d9:82:06:5f:15:
ca:d9:05:49:19:68:17:f9:d2:c8:f4:66:3c:17:1e:66:ad:ce:
78:2e:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:54 2025 by rpki-client