Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
File: 431d8e22-a384-419e-9218-32a80c0ce0e3.roa (raw, json)
Hash identifier: L6Ku9lsOSN/z2iCkSk/R+nwaSh8vlwE2coV6rROOvfY=
Subject key identifier: B5:E6:E2:97:8A:AC:20:CB:C8:F5:E6:E1:75:18:C6:76:4B:49:4C:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62B5EECED50AD464C7E4E104FC94543C5EB126C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b5:ee:ce:d5:0a:d4:64:c7:e4:e1:04:fc:94:54:3c:5e:b1:26:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8d2b643cd1888fc3115e8c365812252992ee8e694185f47cf28638698eff0658, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:48:56:f3:25:d6:54:af:3a:1e:4d:7e:b2:
f1:7e:7e:18:db:0d:b9:72:6e:c8:ef:fa:39:2b:66:
e4:95:d6:54:e6:41:93:72:53:c2:88:d6:21:ba:ec:
09:ee:54:18:fd:86:78:ee:dd:d9:4c:b4:3e:0d:15:
0c:5c:14:5e:c8:e0:b2:53:43:29:cb:89:65:6f:af:
6c:ba:6e:1a:61:08:5d:cf:f9:64:cf:6f:22:c3:2d:
67:e5:21:4a:6c:fe:8f:d0:2f:6d:ce:d0:32:3e:ba:
68:33:1b:8d:98:82:78:38:06:c9:39:ca:21:c3:ca:
29:0b:22:4f:5b:6f:4e:f1:d3:35:54:85:22:6f:fd:
28:33:46:2c:a6:8a:e0:8c:dc:cc:fb:e7:3e:0c:5b:
33:5a:76:8f:11:55:d8:89:a1:66:b1:49:13:59:85:
06:67:ba:3d:28:ed:df:2b:18:33:b9:d8:77:e0:bd:
c5:dc:f7:6f:fb:e5:c5:d4:19:47:4a:a6:46:e2:fa:
a3:b9:37:bb:d4:3d:6d:ad:34:0d:5d:bb:16:e8:a3:
93:38:c2:18:c3:c7:15:af:7f:f4:59:1d:d9:54:08:
9a:52:db:64:3f:32:59:d9:dd:6e:8f:38:8b:fc:04:
d3:eb:76:92:8e:43:39:31:23:14:3b:fb:f6:f0:16:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:E2:97:8A:AC:20:CB:C8:F5:E6:E1:75:18:C6:76:4B:49:4C:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:e000::/40
Signature Algorithm: sha256WithRSAEncryption
70:2f:d6:00:77:fd:03:d7:66:ef:b1:ac:22:54:b1:fa:a0:e9:
c3:f7:1b:6e:7a:47:52:df:7f:ea:78:8c:c6:86:73:f1:49:27:
21:15:b4:99:12:d1:86:fc:87:fd:53:9a:98:3d:95:9e:6d:16:
31:97:85:c6:5e:3c:e8:89:ac:8a:7b:47:df:6a:69:37:66:f7:
1c:69:40:2a:df:83:eb:ac:7e:01:4a:2f:c7:34:5f:34:39:d4:
58:df:aa:5c:6d:a4:b5:20:d9:b7:a6:45:e4:36:82:22:73:a2:
36:79:24:93:a4:9a:24:5e:9e:36:71:0a:63:91:b8:a3:8a:d2:
21:a8:5e:f5:0a:81:fa:d9:a6:83:0b:86:60:50:d2:a4:c4:81:
70:bb:e3:41:a5:cb:e9:8c:00:5f:15:f2:18:96:b4:28:91:ff:
a4:11:6b:9d:03:e8:03:7c:77:09:1a:6b:a1:62:82:44:48:f3:
83:a2:fc:8b:f3:d8:6d:4e:fa:f3:7a:6c:94:3f:15:14:7c:c5:
b0:66:5f:7d:2e:5c:d4:94:6e:24:03:46:a8:23:38:1c:85:f2:
43:be:6c:bd:95:92:85:8e:80:be:05:b7:a4:d6:c2:f1:ce:33:
9a:56:da:7d:61:96:fc:61:1e:da:34:2c:53:74:f6:1d:4d:d1:
67:94:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:49 2025 by rpki-client