Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
File: 41abc6c7-a6fb-4666-b503-a8a0784797a1.roa (raw, json)
Hash identifier: MZx9brINh62/arcOm+geQYRKHQY2m/VuODurAQuf67o=
Subject key identifier: 2F:8B:6D:DA:3B:40:C7:AE:6E:6D:9A:E9:EB:0F:FF:4C:E9:E4:70:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FBFC17C01E29444C45C1F661B2DB58B1F8AAA76
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bf:c1:7c:01:e2:94:44:c4:5c:1f:66:1b:2d:b5:8b:1f:8a:aa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=18586a8d9abc9dbed931785c44813e4443f2ae7f71822ac3e54700947e5149bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:97:8c:a7:6f:7b:0c:d0:7e:c5:e3:37:dc:
2f:f0:47:7e:16:b8:f7:ae:92:e6:4a:47:85:1c:53:
b8:5b:cd:a8:90:1e:cb:23:23:39:33:6c:e3:ad:22:
99:56:c7:8a:09:94:65:e1:af:9f:5d:f0:83:af:18:
ee:a2:a8:63:d6:ac:72:22:48:23:c8:58:19:95:8d:
68:8b:40:be:f8:c3:7a:c0:34:ec:72:81:01:8e:ed:
7d:5f:a2:2e:1e:87:69:25:d9:37:58:2e:0e:43:33:
d9:35:f3:58:2e:f2:1d:34:40:53:b0:f8:e6:56:17:
ba:3c:5f:2d:5e:eb:77:57:fc:f1:56:19:5d:3b:2b:
27:19:a8:6c:44:ff:8e:5e:c0:90:b0:a6:6a:29:7a:
13:5d:5b:09:45:ea:70:6f:15:e0:8b:f2:c4:44:3e:
f0:6b:74:35:5a:ec:74:9e:7e:1c:1d:63:54:53:ca:
68:e3:74:3d:f5:7e:d5:c0:48:05:17:34:59:4a:ee:
b1:a8:2a:18:95:ec:76:16:28:ee:be:e9:7b:cf:39:
ee:1d:f4:c0:d0:f4:dd:ac:df:cc:0e:b1:eb:05:95:
7e:bd:b8:21:51:0e:d6:53:6e:7b:07:05:a8:e3:f7:
d8:63:f1:cf:ca:3a:0f:e7:73:09:c7:54:90:dc:08:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:6D:DA:3B:40:C7:AE:6E:6D:9A:E9:EB:0F:FF:4C:E9:E4:70:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:0f:34:a9:5f:73:a7:5f:2d:17:6f:29:7e:41:4e:9e:95:eb:
79:a0:8a:1f:e9:82:b0:3d:9e:34:aa:4f:fe:c8:d3:a0:7d:a1:
8a:9a:70:3e:92:ac:ce:35:ce:02:0d:ee:82:8d:e0:f3:67:04:
18:aa:ec:4a:5c:86:0e:57:cb:3e:53:98:18:6a:15:82:09:1e:
74:dd:4b:9b:c3:a7:4e:b5:d5:82:97:33:fb:c8:2c:fb:29:a1:
6b:14:c0:de:ff:f9:ee:57:11:4e:ff:22:8a:b9:bd:a6:4a:b0:
12:c5:6e:44:20:fa:94:c7:6e:1a:81:17:53:ed:88:b3:14:1e:
27:83:0e:92:62:ea:57:48:30:b5:6f:a0:29:a7:5d:8d:0f:7f:
98:e4:34:ba:7d:fc:dc:c5:8f:73:e9:e7:57:27:79:5d:8b:57:
c4:e4:7a:24:27:71:40:3e:59:f4:bf:e2:70:a2:b0:8b:53:80:
4b:5a:54:46:e3:29:05:91:1c:3e:d7:b5:23:19:59:53:69:51:
7e:b9:60:ef:c2:2a:f4:92:80:5f:e1:94:fa:3d:8a:70:1d:3a:
ab:84:8b:a7:bd:c3:3a:60:7e:78:f8:d2:bb:a9:60:c2:1e:a6:
a0:41:f7:02:da:71:55:13:76:00:21:e9:de:47:2b:0e:36:29:
30:f8:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:39 2025 by rpki-client