Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa
File: 3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa (raw, json)
Hash identifier: m1kTDAdg4NicVnpTslzpFgBFHseavpaO4DqudRDVfmE=
Subject key identifier: 46:AC:A7:15:BD:86:E0:6D:36:8E:8D:44:40:FF:D1:D7:67:D8:22:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40B87F61F933DF08A9932A468B0C635593ABE210
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b8:7f:61:f9:33:df:08:a9:93:2a:46:8b:0c:63:55:93:ab:e2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=07b6793aa1e828ae48414e1967b14c3296a6f6e4e9a7434a63df3ae603c40a06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:30:f6:b0:48:41:04:aa:4e:d8:e3:ed:e2:
b6:cd:f1:8d:f5:0d:3e:c1:8c:f1:01:b9:24:ef:25:
15:12:ad:eb:1e:7e:d6:02:89:0d:74:2a:9a:54:f4:
82:49:dc:ef:fb:71:42:de:ba:28:50:6d:2f:ad:0e:
c8:38:34:13:4b:c3:de:c7:30:51:cc:20:e5:a1:fe:
6c:4e:68:df:d8:20:24:fc:8d:5c:5a:a4:31:5c:e3:
b6:75:3a:50:a3:e8:31:b4:e5:a1:b6:30:c9:e0:3f:
c3:a3:95:6d:da:82:b2:70:3c:e5:f1:dd:19:13:2a:
43:41:3e:2b:ba:fb:a0:a1:2c:f4:e0:a1:34:4a:77:
72:de:88:5b:c4:c5:d1:cd:98:36:a8:87:81:ff:65:
45:1f:dd:8f:d9:bb:80:fe:8f:4f:32:13:89:6f:49:
b7:78:6a:15:99:60:a5:14:40:8f:9b:ea:7a:f9:92:
64:c4:74:96:37:f6:e6:69:92:bc:c9:63:d7:8a:16:
90:43:f8:a1:d7:a7:b5:a8:96:ff:dc:af:0a:a0:dc:
12:58:a0:e1:20:5c:4f:ea:b3:ef:ec:bc:d1:00:c8:
ba:68:51:9f:3c:af:ed:ea:42:57:2b:d1:ec:0c:8a:
58:77:f4:cb:ae:d0:e8:3e:99:c4:fb:2e:7b:20:13:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:A7:15:BD:86:E0:6D:36:8E:8D:44:40:FF:D1:D7:67:D8:22:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016::/38
Signature Algorithm: sha256WithRSAEncryption
69:1b:40:54:a8:42:8f:c1:09:aa:62:04:01:57:18:d5:91:c7:
90:10:57:a9:4a:24:60:1a:0d:83:59:25:69:30:be:7c:33:68:
ff:fc:c1:79:ed:92:69:17:7e:2b:d9:46:76:47:d4:ca:bf:b3:
64:eb:8d:94:1e:0b:a1:7e:66:65:61:bb:7e:05:7c:b9:f0:1b:
1b:9e:3a:72:68:e6:00:5e:58:f7:9c:c9:48:4c:34:e9:e5:81:
5c:a1:c0:93:6f:2b:ed:7b:60:84:f7:a2:f2:72:02:db:96:1b:
aa:59:ae:75:e2:3c:d3:86:e8:d6:1f:54:91:f8:c2:4b:72:be:
04:a9:fb:ec:4e:8f:df:fd:71:6b:39:d3:73:d1:08:56:59:6f:
f6:b6:1b:f0:d9:4b:96:d7:52:35:13:2f:28:50:df:fa:75:23:
db:a0:68:81:e8:8a:48:78:e3:48:10:01:9a:b7:74:db:a6:a0:
be:85:7d:c6:45:0b:44:ea:7b:32:3f:ed:91:90:a2:2c:99:55:
97:84:a0:cb:87:bf:00:0d:d7:24:ae:57:57:77:ad:97:83:9f:
02:65:08:dd:1c:19:db:23:42:b2:b8:bf:d5:fc:46:1d:47:62:
77:d5:ee:30:5a:ed:f7:36:98:ad:09:98:35:53:c2:40:14:91:
c9:95:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:09 2025 by rpki-client