Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
File: 3c7c4703-2876-4e04-b857-8c0298bd0897.roa (raw, json)
Hash identifier: gEQ6GhW1kjVw+eH1WWTiDk1NGLvHa8HK8MP89EzupOE=
Subject key identifier: 26:64:01:7C:FF:FF:96:E1:80:6A:51:E1:6D:6B:08:33:34:2D:25:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13B98E68A68C942CE32DA4763471ADA9ACC984F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b9:8e:68:a6:8c:94:2c:e3:2d:a4:76:34:71:ad:a9:ac:c9:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=93a096d7be2e44dc94d8814a531b3d9c402a8b3335c541bfbd63ceccec664ac9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:32:9b:db:f0:11:b8:94:13:11:ba:92:bc:
c6:cf:85:93:16:4d:88:49:ea:39:e7:15:0a:74:5f:
f7:82:a7:e2:a3:fc:9a:16:70:f0:5d:45:6c:bd:83:
6d:de:a2:18:54:3e:6c:32:8c:18:58:84:ca:8c:9c:
08:68:7c:0d:c4:7c:a1:1e:ad:b1:09:21:be:e7:57:
b3:0a:76:c4:40:11:a3:0b:8d:dc:fb:fc:08:ee:28:
33:52:30:0f:cf:70:70:5c:92:85:6c:d6:7f:49:f2:
5b:2b:3a:95:e5:70:9d:e1:21:1d:0a:99:4d:3c:0f:
77:df:0b:37:5c:d3:6c:25:a4:e3:c3:40:fe:0f:72:
aa:c6:ba:9b:34:9d:cb:63:76:bf:e7:bc:20:ad:92:
e6:ab:bd:c2:5b:86:78:3e:c7:ef:c2:ab:5d:fd:ae:
db:75:f8:7d:0e:64:13:d3:85:16:0e:6a:fc:2a:9a:
13:9c:07:cc:dc:91:8e:c2:a9:e8:98:27:1a:4f:08:
f2:d4:78:68:d6:cc:cb:06:36:97:a8:60:cd:50:9d:
76:be:86:46:d8:05:e9:84:20:c4:2e:1c:f7:e8:98:
57:38:ad:b5:17:d4:a2:26:f6:fb:38:de:52:96:2c:
d8:3d:08:99:29:e8:30:15:b4:9c:4d:e0:1c:77:c6:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:01:7C:FF:FF:96:E1:80:6A:51:E1:6D:6B:08:33:34:2D:25:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:49:61:06:99:40:dd:8b:0e:5d:cc:39:b8:54:07:ed:d3:e2:
4d:b7:3e:25:65:3a:00:ca:9d:87:a5:17:27:f9:17:1b:27:e7:
8e:9f:3d:36:32:87:37:27:99:2e:7d:99:37:3e:f5:bf:41:86:
fa:31:bc:e6:a3:ba:17:5b:e7:fa:06:54:a8:7d:73:9d:79:0b:
5a:65:3f:c9:20:d8:98:76:55:37:d1:be:a6:e0:d1:39:5f:17:
c1:1e:6e:ea:cf:ec:b8:a6:19:a6:00:a8:da:93:8e:3f:4c:64:
12:83:36:ed:c3:42:cf:d6:2e:58:a7:fe:37:a7:cf:c6:a1:d3:
19:3e:81:3b:2b:c1:5f:cf:d4:1f:4e:2c:52:37:7e:13:ba:75:
42:a6:c2:be:d7:a6:66:b3:14:3e:8f:af:d7:eb:cd:10:7c:7c:
87:60:2d:a3:07:8f:d9:6a:ba:6c:3f:6f:d1:28:0c:fe:00:0d:
8e:67:ea:97:94:ac:ad:21:3a:27:15:ab:c8:ca:87:03:42:ed:
83:a4:03:04:23:db:d7:0d:15:f2:89:36:c0:d1:7c:89:6d:b7:
4b:44:de:ca:1b:b8:54:84:1e:11:81:95:b0:b2:83:59:46:ad:
19:db:e1:40:c9:ac:96:48:10:58:e9:50:c0:03:99:dd:2b:0d:
af:cf:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:11 2025 by rpki-client