Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ca8b07f-9b0c-4146-bf64-26b25078ba32.roa
File: 3ca8b07f-9b0c-4146-bf64-26b25078ba32.roa (raw, json)
Hash identifier: vn7Yfw1SwADUflSN5pn2erhFoi5VHqfdPGJf5ySph5E=
Subject key identifier: 72:E8:4A:B7:CB:6A:BE:7D:35:B5:A6:57:13:01:43:19:9A:F1:8C:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C98507F45FC48AB987880CE2E64ADB6309D5ADB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ca8b07f-9b0c-4146-bf64-26b25078ba32.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:1080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:98:50:7f:45:fc:48:ab:98:78:80:ce:2e:64:ad:b6:30:9d:5a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c1914632311a15633f0fa47d8bc21bbb8c88c25c5425c09fc3deab6632fd8e13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:e5:70:f6:89:4a:95:11:13:46:73:09:43:
9d:a7:94:8f:e4:ba:50:7c:70:75:63:8b:7d:b6:61:
9c:39:15:e9:51:d7:5d:ba:fb:b8:f2:3f:fa:f2:d9:
f5:57:ad:ef:45:52:a2:88:39:f1:27:57:7e:97:b0:
f5:dd:bb:21:4b:6d:6b:d7:09:05:c0:46:c1:95:99:
57:3d:90:22:13:5a:66:32:9c:93:fe:d2:23:cd:ab:
a9:a7:c2:78:4b:00:23:6d:03:cc:a9:e1:d3:46:2e:
19:50:a2:89:60:63:7f:c3:82:59:e3:4b:29:58:36:
75:06:ef:fa:98:99:2e:b0:92:33:cf:72:68:fb:db:
23:a3:63:27:e4:34:88:7c:da:3d:89:a2:cf:b7:22:
dc:31:26:f1:76:1a:1f:ee:fa:8f:af:7d:46:12:0f:
c6:6f:31:21:5e:c6:21:6e:89:2b:af:d0:75:ec:30:
ad:3d:ce:bc:26:0f:45:1b:7b:5c:8e:86:40:d1:ce:
0c:41:5a:1e:60:89:48:00:89:c0:62:35:e8:08:38:
9e:5c:41:bb:56:9a:a6:46:c2:a8:b1:2f:90:de:8e:
70:32:2b:7c:87:f2:7a:7e:37:72:6c:e8:32:7a:72:
dc:ea:df:17:57:b8:0f:28:60:7a:49:3d:fe:4a:b5:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E8:4A:B7:CB:6A:BE:7D:35:B5:A6:57:13:01:43:19:9A:F1:8C:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ca8b07f-9b0c-4146-bf64-26b25078ba32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:1080::/46
Signature Algorithm: sha256WithRSAEncryption
5e:27:e5:9d:be:ab:d4:d0:0c:bc:cb:3c:51:53:d7:8b:42:67:
34:da:0d:40:f3:ea:17:7b:8b:a9:bd:5c:de:41:6e:38:1e:ca:
c3:66:22:94:3e:dc:8b:03:4c:0c:31:41:7c:d7:92:f9:11:fd:
2b:63:ca:44:46:e4:49:9b:28:8e:0a:6f:f1:24:b1:a0:98:40:
a8:0f:30:1f:3b:53:d1:65:d3:aa:c3:aa:0a:af:11:ea:40:6a:
50:40:5b:a9:20:61:17:f2:16:a0:1b:9c:9a:35:6d:e0:a1:75:
4d:28:4e:e4:ef:85:7f:f2:d3:c7:ba:11:a5:4d:65:96:10:7f:
61:cb:8c:fa:a8:71:4b:65:73:ea:1e:2d:8f:17:b7:72:0d:43:
60:61:4f:b5:87:0a:18:07:e2:61:6b:44:a6:35:6c:4c:e5:0b:
6c:8c:1e:70:22:51:23:14:99:82:d9:aa:56:77:8c:57:21:8d:
5f:eb:3b:f2:fb:43:a7:c2:6b:06:cd:2e:39:e3:ec:74:50:77:
c2:47:4f:2a:a4:6b:58:0c:d5:26:03:15:74:99:4f:3d:d8:00:
96:e5:c9:9f:1c:45:a8:06:64:dc:84:8d:52:73:ff:55:02:b4:
4c:b8:56:1d:67:0d:6f:9c:d0:60:1b:7a:d9:ea:d9:e3:25:ec:
08:70:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:55 2025 by rpki-client