Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa
File: 414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa (raw, json)
Hash identifier: 1X9AZb0HG4vrqYuiRoZachvj/7V/Sr7u/GqACbrpVvM=
Subject key identifier: 2A:2F:F7:6F:72:4D:D0:B4:E0:4A:D0:9D:AE:D4:9C:6D:F3:4D:8C:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72B67EA4E155D482A71725A7D1E72D8E71607928
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d017:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b6:7e:a4:e1:55:d4:82:a7:17:25:a7:d1:e7:2d:8e:71:60:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=60e1bb2f2c2368511230e9e7e108438af01f56e845297f2240f6ea0228cda754, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:1b:98:a4:ce:43:cb:d7:62:54:88:d6:bf:
04:0d:61:14:12:e1:35:f4:91:5a:4a:7c:57:fc:3f:
d9:94:19:1a:d6:d6:97:84:ac:56:ae:63:9d:de:43:
ca:f6:ca:f0:df:cd:1d:a0:c5:4f:a1:d7:16:56:ca:
44:c7:7e:48:8e:33:43:10:4e:21:a1:e2:d2:09:6e:
30:dd:a6:56:ba:67:18:06:23:53:3d:3b:e6:a1:84:
f0:18:c7:1c:b5:d0:d1:bd:1e:fd:48:49:f7:cb:03:
f0:a1:92:05:4a:fc:9c:f4:e5:af:bb:9a:76:b6:ea:
8f:6a:27:ab:8f:7a:df:de:19:b8:00:ba:00:38:76:
c7:b4:0d:3d:d5:fa:f4:06:27:84:8c:89:ae:33:47:
a4:af:6b:4b:99:d2:8a:e0:67:15:6a:69:47:cf:65:
ab:2b:f9:3b:ce:6f:c1:ce:51:c2:aa:c5:93:b2:c0:
76:4e:7d:f1:83:9a:ed:38:44:a7:81:1e:e0:f5:43:
4b:bd:c4:73:d5:b2:4e:d5:f3:97:c3:a9:d3:13:42:
91:82:86:78:6d:c3:1c:c2:de:9f:53:9b:22:22:4c:
67:e1:fd:b3:9c:93:73:45:78:e6:78:82:d3:1b:30:
1b:71:25:7e:8f:df:73:98:26:d1:fa:93:29:40:8f:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2F:F7:6F:72:4D:D0:B4:E0:4A:D0:9D:AE:D4:9C:6D:F3:4D:8C:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d017:800::/37
Signature Algorithm: sha256WithRSAEncryption
7f:4e:f6:29:b7:6b:06:a2:d5:34:53:6c:e5:df:69:b3:74:27:
09:63:11:0a:21:4d:8d:bc:70:ea:9e:29:10:94:59:ce:6e:34:
d6:2f:97:e6:0c:6d:fc:6d:16:59:e4:d4:15:c9:fd:5c:de:d5:
7e:e3:fc:3a:62:45:f4:b4:61:cd:65:7b:bb:24:88:67:9c:ac:
32:47:da:06:7f:dd:25:49:b5:e5:ff:cf:52:0c:e9:9f:20:e8:
c4:b5:95:0b:d7:86:50:b2:57:f3:20:71:d7:02:f5:b3:51:f2:
b3:b0:ca:eb:28:4e:ed:0d:de:8b:ab:2f:7c:ff:3e:16:49:6a:
e9:aa:ee:11:32:4d:c7:bb:6c:66:d4:68:18:5d:51:43:5f:f8:
26:11:6a:0b:47:39:37:0e:00:28:b3:e2:b7:1f:16:5c:a2:2f:
9f:18:e6:5c:5f:b1:3c:ad:1e:ac:6c:b4:b6:b1:3d:d5:b0:28:
af:39:e8:4b:da:17:a4:52:73:50:93:85:5f:06:a5:68:3d:18:
48:09:ed:dd:7c:a5:01:ff:32:01:78:b1:6a:e3:cb:25:08:6f:
d5:79:e0:29:12:dd:cd:28:e5:0a:6e:97:c0:be:13:22:32:a9:
33:36:e2:1a:ee:e5:c1:1f:cc:3a:5d:33:0e:81:ca:ee:ae:36:
88:aa:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:36 2025 by rpki-client