Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408e49db-4fbf-4903-9de9-a7d373730676.roa
File: 408e49db-4fbf-4903-9de9-a7d373730676.roa (raw, json)
Hash identifier: zjrxNbgzIfKmkexDNCq4MHs1v6BJDDCO/HF9snUdZno=
Subject key identifier: 14:16:A4:66:C3:EA:AA:35:8E:B7:D8:4A:F4:AE:34:B7:6C:6F:88:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37A6C03A6FFBD937E9E7031750AC90B0D1451326
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408e49db-4fbf-4903-9de9-a7d373730676.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:90c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a6:c0:3a:6f:fb:d9:37:e9:e7:03:17:50:ac:90:b0:d1:45:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2fd480a5ac4ead4b51903f179c5cf6f48c40fa43dd7b746ed81c5a9dadd2b8c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:07:c0:62:3a:9a:c0:26:f7:e4:a3:82:c7:
32:23:3b:5f:19:e7:96:94:d3:a3:4d:f1:a6:21:96:
a4:27:c3:be:f5:47:95:d3:c1:cd:29:17:b7:82:1d:
78:a9:f9:6c:c9:2d:42:82:11:3b:ec:95:26:4f:2a:
77:91:f5:00:4b:ca:06:88:cb:ba:7b:44:3c:e4:62:
54:d4:ed:9f:06:39:a4:fb:b7:7a:32:c5:cf:11:da:
c5:8c:6a:78:7d:66:c9:43:8b:a9:38:43:ba:b3:6f:
17:bf:84:a6:9c:e7:33:e0:06:6a:5a:4d:a7:f6:f6:
f3:40:84:dd:00:69:59:88:80:27:6b:4f:b5:df:3c:
41:73:45:57:18:f4:02:2b:e4:ea:80:9e:6b:00:5f:
ab:07:68:dc:8c:4b:7f:95:b5:94:51:d7:98:b2:b8:
5c:3d:ba:05:5a:ed:90:b8:0b:f4:29:0b:37:18:35:
94:e3:5a:d6:ef:1b:5b:e7:34:e0:61:b8:0a:ed:ce:
ef:ba:32:fb:2b:52:64:24:79:5b:ac:e0:58:5c:d7:
41:6e:85:18:c5:e6:b9:0a:85:be:68:f7:cb:00:7a:
ce:a8:3f:28:34:54:20:b8:8d:cd:e7:7d:48:0d:8f:
da:1f:c2:03:dc:d0:02:af:47:79:88:bc:28:3d:b4:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:A4:66:C3:EA:AA:35:8E:B7:D8:4A:F4:AE:34:B7:6C:6F:88:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408e49db-4fbf-4903-9de9-a7d373730676.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:90c0::/46
Signature Algorithm: sha256WithRSAEncryption
c9:09:e1:a0:47:80:d6:f9:e7:e5:9b:f5:8b:a6:f7:2c:a2:bd:
23:af:23:60:cd:58:fc:c5:67:ae:5a:42:c2:40:26:ff:09:2c:
a5:87:a7:f0:2e:fa:22:c2:45:e2:39:f8:94:f7:3b:57:29:ef:
30:4a:65:fc:47:5a:97:24:21:ae:a8:f4:6c:0d:51:fb:c6:ba:
41:04:92:05:e0:b6:af:9c:66:f0:62:a6:dc:f6:23:66:31:87:
cf:a6:78:d1:fc:4c:b0:94:24:c3:f5:58:5d:97:04:ce:43:18:
ba:26:12:f9:d6:8a:e9:4a:16:56:0b:29:41:bf:87:68:89:df:
ca:4f:f8:e1:d6:44:c6:15:88:ad:be:78:10:62:bc:64:49:64:
ee:01:7d:34:fc:63:c1:28:df:dc:b0:11:68:aa:8b:85:2e:e6:
04:a7:88:c0:54:06:5c:2c:71:e9:04:25:ca:88:d6:3b:e8:8b:
e5:4c:1b:0a:af:c3:47:f2:f1:be:20:78:77:6d:0e:cd:37:4e:
64:31:b2:72:21:9e:66:b1:f6:f7:91:ad:ab:17:1d:2f:27:0a:
3f:ab:f3:f8:c7:a0:7e:7d:f3:e1:b1:73:8d:42:96:64:e4:26:
09:96:a4:ef:0e:97:dc:b2:3b:e2:3a:97:9b:06:34:55:ac:e4:
49:fa:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:26 2025 by rpki-client