Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
File: 3f8d2f8f-3d48-47ce-8524-66406f0de004.roa (raw, json)
Hash identifier: G0q8lRpcNCTDkyCv4kOo955fzHw2KQbb9/istULe0pc=
Subject key identifier: 63:BF:0E:82:1F:50:A5:24:72:08:39:7F:BA:AC:EE:92:45:22:F5:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70CAD024D8C6411EEF550FBE463C1AD09183B7CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ca:d0:24:d8:c6:41:1e:ef:55:0f:be:46:3c:1a:d0:91:83:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=73035e49003ede63abb98be79ff0df20f06f5153daaa3a1d1b067a519a23a13b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:cd:61:ed:24:43:21:58:31:b5:aa:49:63:
38:f0:68:56:36:97:6e:42:d1:3d:b5:be:3b:47:0b:
83:e6:4a:f1:ab:f8:62:92:d9:bb:25:d9:20:1f:e2:
cd:30:0e:da:1b:2f:a9:46:15:19:1b:82:85:1b:c0:
85:e4:8d:d2:73:e1:7d:38:ee:6c:98:00:04:08:de:
9f:6b:07:c0:97:bf:f2:56:22:26:bd:b4:04:c1:79:
1f:c2:02:5f:39:80:3c:9f:29:0c:29:10:1e:2b:aa:
7a:8b:e4:64:0f:78:92:20:fc:cf:a8:a7:2e:9b:98:
94:fc:08:63:9a:b0:3a:16:64:91:b6:35:32:94:ab:
20:ff:d8:84:d3:b8:b9:60:71:c4:b5:63:5e:5f:e8:
a5:b1:0f:d6:9c:0e:df:3f:bf:0a:0a:72:80:fa:4c:
6e:1e:b6:30:2f:cb:df:eb:fd:06:dd:77:16:64:e6:
f3:c1:3a:5c:49:b6:37:bb:7e:30:ad:fe:77:db:c6:
ed:cd:cb:5d:b0:b1:75:00:4a:a7:94:6b:8c:91:6e:
c3:68:04:68:64:98:5f:89:2f:db:cf:6a:67:8b:1e:
aa:3e:44:76:d8:6f:7b:5b:4c:91:4f:59:62:4b:ea:
2a:37:59:a5:6e:10:be:c9:d3:6d:36:28:20:cd:f9:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:0E:82:1F:50:A5:24:72:08:39:7F:BA:AC:EE:92:45:22:F5:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:b000::/40
Signature Algorithm: sha256WithRSAEncryption
a3:0f:85:fe:31:65:c8:e4:b5:13:5b:b7:75:83:ee:51:3b:da:
4e:bc:f5:58:d0:35:d3:d4:f5:1e:aa:9d:36:b5:d2:ae:4b:01:
e0:6c:30:93:5b:35:41:7f:a5:54:02:6f:83:3a:7a:87:4f:64:
e3:c4:78:35:d9:64:a3:af:07:fa:bb:b8:3c:99:68:11:28:09:
a9:a9:b5:99:9e:61:35:5a:88:b0:88:97:be:c5:bf:0d:f5:23:
9b:c0:8c:0f:71:c6:8b:42:63:27:c8:6e:5e:ed:7c:b5:c4:66:
10:52:33:62:8a:b0:c4:04:3b:ed:fb:29:6b:e6:81:c1:44:f6:
5a:be:14:35:fd:7a:68:e1:4e:7f:72:c8:f6:f8:19:9f:3e:29:
6b:b3:dd:da:4f:54:8b:4f:68:3b:70:22:7a:19:e0:49:7a:4f:
da:ee:b1:6e:22:7e:9a:36:24:89:b9:df:05:5f:3d:d0:43:89:
ae:d6:fd:17:53:84:30:92:b7:92:f5:f6:7b:b8:f0:96:fd:aa:
03:27:9e:56:4b:ff:00:63:df:63:66:47:78:0f:72:64:af:19:
8c:da:86:ae:e4:75:86:0e:5c:ad:da:06:84:a8:ee:78:e1:aa:
86:0f:6d:a4:16:b1:ce:59:e1:85:ae:92:fd:2a:76:f9:c0:6f:
3f:50:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:25 2025 by rpki-client