Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
File: 3ef5e7b8-24ad-41af-8334-2eff292a769d.roa (raw, json)
Hash identifier: 36kaJ9wZyJVz3dcuAbA4V0Jd+Tv9p5r1PZY6ArhdKq8=
Subject key identifier: 0C:F6:9D:4E:69:55:8B:2D:39:0F:25:D1:C6:D9:B1:D0:E9:80:0B:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13822929804F1C25D45A17CBBFB1995EE70999C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:60c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:82:29:29:80:4f:1c:25:d4:5a:17:cb:bf:b1:99:5e:e7:09:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5307161afcd3083039658b9d7cd200c3202d79a883ff8a186f58922a03941d24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:fd:5a:c7:87:20:e1:66:99:e8:3a:f2:d0:
9e:f9:4f:dd:cc:29:1e:9e:0c:43:22:be:75:5a:a6:
33:35:99:e3:0e:6d:4a:20:6a:80:06:8a:43:82:69:
99:ac:6f:e7:58:2d:3b:8a:8c:45:cc:1c:a0:ce:11:
66:b0:c7:f7:ae:b9:6f:10:4d:f6:bb:c8:b0:6a:72:
2c:d4:dc:6c:42:00:92:43:85:a1:75:ad:ed:ac:07:
8f:0d:bd:9b:46:6c:4e:55:50:0f:54:79:55:eb:ad:
46:6d:9a:4b:0b:6e:c1:8b:02:ad:43:78:cd:1a:47:
35:6e:31:8d:25:4b:00:a3:2b:9e:1f:b6:20:29:33:
39:90:74:91:cb:90:eb:62:15:a9:58:cf:37:7c:59:
04:2c:3e:64:17:b9:64:16:0b:f4:c9:76:e3:e4:4f:
f1:84:29:e4:dd:c0:81:b3:b7:eb:37:fa:cf:a0:53:
97:58:63:a5:15:92:9a:60:ac:13:61:cc:9d:a6:af:
37:21:6f:dc:6e:6f:d2:2b:eb:e7:b6:c0:b2:b6:23:
0b:45:27:31:84:4a:e3:47:31:71:67:84:0c:9d:96:
b5:b4:be:40:8c:45:c7:77:51:ae:81:d2:58:4c:cb:
c0:61:17:1a:c2:3f:de:dc:4b:b6:98:9a:e8:38:6e:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:9D:4E:69:55:8B:2D:39:0F:25:D1:C6:D9:B1:D0:E9:80:0B:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:72:74:6b:f0:8b:83:97:27:ef:39:d0:29:c5:05:a5:da:c4:
82:bf:eb:fc:95:52:1f:db:3e:cf:dd:5c:da:c7:c0:cb:3c:0d:
db:79:88:d3:df:f1:3d:c0:ed:d6:e6:a5:55:e4:fa:6d:f3:b0:
8a:28:85:ca:3e:12:d6:d8:5d:98:e6:a1:52:ca:2d:85:9d:6b:
94:b5:b8:7c:e7:f8:5f:fa:8c:25:3b:9f:8f:84:41:38:f8:ec:
58:40:8c:21:c9:85:7d:f3:53:b4:13:22:c7:09:81:f8:55:d1:
ca:cb:26:7d:f5:58:bc:02:9a:0e:66:22:9f:00:17:f6:df:36:
a2:a7:36:5f:5a:bb:6a:7b:c7:29:fe:b6:7b:b3:13:a8:6c:d1:
bf:2d:3a:67:1d:81:1c:7c:57:aa:e6:77:75:a6:07:d8:88:c7:
fa:dd:cd:9f:94:ac:73:4f:40:d5:10:6b:26:6c:49:7e:d3:f4:
d5:cb:94:92:67:dd:57:98:25:6e:ef:85:3b:97:09:99:79:0a:
2a:d6:9a:7c:ab:fc:e8:1d:3f:d4:32:e5:89:7f:f9:11:cb:7e:
40:c6:e1:eb:24:d2:d5:76:28:eb:03:35:b1:b2:53:93:44:8a:
00:e6:d2:29:ac:47:fd:e9:47:a8:dc:6c:dc:f9:1c:7a:61:ce:
d1:56:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:05 2025 by rpki-client