Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
File: 3f1caa71-8276-42c2-bf3a-470ac560fb89.roa (raw, json)
Hash identifier: Pqsv2fAZUk+fjoUWvqESWX/mxoS0CfF69DWHwMqX3uU=
Subject key identifier: 16:67:A4:67:2B:CE:56:B5:AA:27:88:C4:7F:BC:6E:D1:D2:2C:18:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34E87223A95988FBB146E1F75896D57BB845106E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e8:72:23:a9:59:88:fb:b1:46:e1:f7:58:96:d5:7b:b8:45:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0771e807be3a863e2156709487ab78c666b18011c9bb8f594cda39fb681ce916, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:05:5a:14:f7:63:ea:33:49:eb:d4:53:8a:
eb:d0:1d:49:a1:eb:3d:9f:60:de:3c:3c:f3:1e:8e:
9b:74:46:ee:9c:6c:fb:3d:a2:b3:1b:7c:6e:78:cb:
ea:44:44:bb:eb:bc:f1:03:b8:63:0c:41:fa:84:28:
61:c3:18:e3:dc:6e:99:61:b0:a4:57:db:c3:68:00:
ea:a6:95:d1:87:26:ba:0f:3c:f9:b6:87:15:79:1f:
92:5d:5c:0d:54:d7:25:e4:15:cb:80:df:7f:f6:83:
de:1b:4c:df:e8:df:c2:b3:f6:ac:2b:d7:0c:c6:63:
58:b5:09:0a:98:09:3d:c9:10:11:52:b1:ff:b8:ef:
39:81:5a:72:8b:2e:d1:65:42:50:24:62:d9:00:75:
26:92:12:bf:d4:e3:86:c4:6d:f9:2c:6e:78:15:a5:
23:fd:87:64:62:cc:7d:da:e5:09:2a:6b:ce:30:37:
11:ad:05:aa:ad:77:0f:12:a8:ee:95:24:80:8b:49:
75:dc:64:7c:2a:dc:84:1f:02:f0:fd:5f:9e:2a:16:
73:d7:8f:38:3e:7d:8b:94:e4:7d:ba:2d:72:08:58:
d3:bd:f0:66:f4:b1:49:65:2a:68:1c:66:08:f0:8a:
28:fe:5c:ba:37:1e:d6:da:c6:30:1f:44:a3:b0:f2:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:67:A4:67:2B:CE:56:B5:AA:27:88:C4:7F:BC:6E:D1:D2:2C:18:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d::/37
Signature Algorithm: sha256WithRSAEncryption
60:c2:87:da:f0:a9:82:e9:d6:15:e3:94:0d:f1:0b:36:bb:0c:
4b:65:7f:eb:b4:ae:12:ba:fb:82:b8:86:8d:2a:f5:4d:d4:36:
39:7e:9e:31:58:eb:6e:e3:af:9e:4e:bd:9f:aa:ec:4b:3a:00:
f4:ab:10:41:cb:d7:5c:b3:a3:17:50:32:fc:92:01:f5:3d:00:
51:d4:ad:e8:85:5c:f5:97:90:b2:45:8f:dc:2a:54:8b:0d:a0:
d6:63:84:41:09:ae:07:48:94:bc:c8:5a:5c:35:0f:af:eb:d3:
0b:1f:48:b7:f2:fa:ad:e0:34:a8:de:28:1f:9a:00:66:0a:a0:
b0:d8:d4:ab:29:40:a3:3c:bd:9c:66:ef:54:7d:a4:75:a0:9a:
05:91:6c:3b:08:0a:b2:42:6f:da:3e:f9:f1:c0:04:de:af:1d:
6c:35:19:a9:95:a8:82:b1:2f:ea:a5:ab:c9:27:9a:d8:b5:81:
71:d9:74:1d:fb:2a:03:f6:69:11:08:37:5c:b2:ae:b4:0b:d6:
45:17:2d:6e:bb:b3:42:df:1a:63:dd:fa:9b:c1:11:ab:06:cf:
fe:cc:91:ec:ad:1e:3e:5a:9d:84:85:b0:fe:20:90:41:1b:ec:
e3:bd:87:ba:c9:58:6f:d1:58:1c:80:95:81:ce:b1:d1:2f:cb:
1b:de:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:24:54 2025 by rpki-client