Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
File: 452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json)
Hash identifier: NGGLh744QN0nultrm82jecszwY0y4dF8YkuLvGBaIBY=
Subject key identifier: 98:67:C7:9E:F2:EA:94:2B:B0:53:4F:82:DE:2D:A2:73:8B:DF:85:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4711CC56985424FD015249CAB42944452065EEFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:11:cc:56:98:54:24:fd:01:52:49:ca:b4:29:44:45:20:65:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2aeef6bd207cf0c0fa8c961fb113df3890c6ea0f2a5f812c38bdca052189e934, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:84:37:23:69:fb:fd:fa:8c:7a:31:60:0a:
5c:5c:ce:e4:dd:e5:52:06:b8:75:71:1e:b5:e3:1f:
b5:79:d8:cb:c1:91:ec:15:40:07:be:80:37:c5:57:
66:2c:e9:89:e0:61:56:b1:ae:00:72:2d:02:62:10:
fb:c1:c7:cf:08:1c:6b:e7:74:3d:54:c3:52:0b:3b:
c9:ed:53:34:0b:0b:ca:ec:ed:8c:b8:54:5d:07:39:
d1:8c:1b:12:28:9b:47:62:09:c7:75:6f:17:70:ae:
55:4b:b5:e6:75:f4:80:a0:ee:ea:87:02:07:a2:42:
56:f6:f0:b5:ef:cd:97:c9:28:b9:7c:a0:b0:ad:43:
c0:dc:6c:19:ed:d8:b2:7b:79:8e:b4:51:c6:11:0a:
de:99:45:03:29:01:25:f9:05:90:b7:c0:67:fa:4c:
46:96:e4:44:d6:1c:f6:39:9b:8e:80:f6:bc:c4:a1:
13:72:7d:b6:c1:ab:45:52:f8:fe:1a:d1:70:66:92:
7d:be:5a:90:0d:fe:9c:05:97:c4:68:01:3f:f0:5d:
0d:e4:55:19:9a:0d:72:ae:92:54:b9:7a:56:ca:34:
d4:f0:89:8e:6e:7f:7e:00:dc:e8:e5:48:0b:67:07:
f5:92:4f:46:e6:92:e7:39:50:65:c5:39:55:36:fd:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:C7:9E:F2:EA:94:2B:B0:53:4F:82:DE:2D:A2:73:8B:DF:85:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/37
Signature Algorithm: sha256WithRSAEncryption
9b:1a:25:8b:e4:07:78:15:e2:9a:f2:00:41:c1:92:19:fc:20:
24:0c:4a:85:be:91:4c:58:d9:1d:2f:70:fd:83:05:7b:4f:ab:
21:98:4e:9a:28:cd:ae:00:9f:b7:f8:df:45:7a:f6:77:27:b2:
2d:3d:94:42:79:a6:d4:86:45:79:1d:2d:18:ba:eb:eb:df:2f:
71:e7:7b:19:ad:ef:30:74:d6:40:48:67:fd:e6:53:95:1f:38:
99:a0:89:97:7e:18:fb:8b:4b:fa:79:9a:51:c5:39:6c:11:8d:
37:74:ac:d7:f7:61:f2:3b:aa:b9:07:28:45:32:15:3b:f1:99:
fe:31:46:5e:65:b2:98:3b:72:16:3a:ae:b4:65:19:98:af:b5:
f0:22:d2:72:1b:c1:aa:74:26:a0:25:d6:d5:11:78:b7:83:27:
e4:0f:7b:31:da:fa:5a:8b:c4:82:f4:28:ad:d1:4e:bd:b3:78:
d0:92:89:d7:a1:27:45:e1:04:b4:25:45:3f:1e:6b:08:38:cf:
10:20:e8:09:cf:06:29:67:97:0b:70:fb:3c:52:b7:e4:c9:28:
6d:0e:7c:d6:5b:5f:7f:9a:67:76:cd:53:c9:1c:ea:b7:1a:6c:
72:74:f1:b3:38:6c:2a:aa:82:af:d7:e4:97:87:ad:66:a3:79:
63:44:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:33 2025 by rpki-client