Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File: 44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier: R6mquWtk5NQzYjb5v9Gxb15B778gFg4QlbMZr0bDrzE=
Subject key identifier: 03:90:5E:0E:AF:8A:F6:45:5D:98:B4:98:3B:48:2D:05:C1:81:31:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3DFAB146EEF10562CF9B1096EC22A58797F2C434
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fa:b1:46:ee:f1:05:62:cf:9b:10:96:ec:22:a5:87:97:f2:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=283bb2d92eb00975c65be3eac3ec09e5c46909d1130fe77019fb5edd06ca34c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:11:73:31:5f:39:8e:99:c8:2b:e3:39:ba:
c8:e2:1c:6e:fa:9b:bf:6e:e2:1c:03:86:cb:5d:06:
19:9b:2f:1d:9a:99:98:69:e8:c0:6e:07:92:8b:21:
e8:60:27:3f:9e:87:7e:23:55:14:43:03:e2:44:dd:
16:a5:6a:cb:4a:c0:2d:be:4e:a9:c0:90:f2:a4:2d:
08:4d:87:9f:f1:6d:71:a2:78:66:0a:2f:e9:82:cb:
f0:a5:33:43:21:a3:2d:14:04:74:cb:24:9c:2a:4f:
58:10:a9:04:0b:92:16:21:ea:aa:d2:a5:b5:31:da:
34:c6:54:47:18:3b:a9:88:82:b4:b8:14:97:c0:8c:
01:06:d9:50:75:c3:9f:07:ce:39:a9:6c:01:ad:8f:
61:c8:b9:2e:f5:c4:0e:a6:fb:a5:ce:e4:fe:be:65:
3c:aa:0a:93:5c:d3:a9:36:21:7e:1f:30:27:fa:5a:
9f:00:7a:2f:9a:e7:fc:d2:50:eb:f6:2d:47:24:ba:
5e:83:09:af:11:92:3d:d9:5e:8c:f3:f8:25:b5:b5:
37:3a:75:63:88:6d:d4:eb:b7:e1:70:d5:25:ba:34:
37:8f:7f:cd:1f:86:88:33:93:95:e0:06:c6:df:f7:
8e:72:df:35:21:4e:8c:13:8d:f8:0d:11:89:db:87:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:5E:0E:AF:8A:F6:45:5D:98:B4:98:3B:48:2D:05:C1:81:31:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5040::/48
Signature Algorithm: sha256WithRSAEncryption
73:6a:76:f6:be:5d:cd:2c:cb:44:e3:c4:c1:a3:02:a1:ac:3d:
8a:7d:c2:8e:b9:61:e7:48:d4:31:69:02:e7:d5:6a:89:af:3f:
cc:a6:86:1a:f2:e0:72:93:b7:92:3e:dc:75:89:9d:92:1a:c8:
8a:60:1d:d7:3e:93:3b:c9:00:bd:fc:6a:42:75:f6:94:bd:ff:
2f:d6:52:0a:7c:9f:dc:fd:9f:d0:c4:8c:4c:61:3a:ff:1d:6c:
bd:5c:92:3c:96:b3:61:bf:b4:9a:e1:a4:a3:16:a2:c7:e3:93:
0a:6d:6f:ea:fd:54:0e:24:e5:a5:a0:dd:c6:8c:ac:60:84:f8:
4c:5d:3f:91:93:aa:71:80:95:bb:3e:af:cf:6f:84:f8:c8:0a:
eb:3b:64:90:ad:d9:28:8b:de:36:8d:b9:0e:6d:91:aa:90:76:
48:b9:54:41:83:96:6f:f7:f3:19:68:4a:e9:29:36:bc:8e:ef:
3c:cd:60:78:55:af:d9:2b:97:71:39:6a:8a:86:95:09:b0:ed:
69:6d:27:90:db:98:0a:0b:6c:a9:4c:de:7e:60:83:66:60:86:
84:70:eb:57:3f:c0:17:83:e8:50:6e:a2:eb:6e:a8:bd:bb:61:
8d:27:dc:bd:22:6d:9d:0a:3d:a3:1d:58:16:85:f1:98:25:ab:
b4:10:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:43 2025 by rpki-client