Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
File: 48202432-610c-42b2-9763-e895c6cbe70d.roa (raw, json)
Hash identifier: Tn0MgLZHbqjS1DtQUJTmOqvQrNwh4PJY5JyLIdJwBHk=
Subject key identifier: 22:C7:16:A3:B5:42:F4:03:7C:A5:C3:5B:50:7B:47:0E:CD:2D:74:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: BDB681264F3258721D975630148010B00C2B7B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bd:b6:81:26:4f:32:58:72:1d:97:56:30:14:80:10:b0:0c:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=351592bc6f15b5a010712448cd77b5b00dc14de72b9f412adcaac6ef380a01e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:d7:80:6b:55:c6:bc:58:5d:2d:5d:7f:ac:
87:e6:47:97:51:e0:f5:d1:36:fe:ac:a1:d9:b6:e6:
b7:d4:c8:bd:5e:4a:50:a1:be:bf:ef:11:60:62:17:
43:68:b2:36:24:90:f0:b9:fe:8f:26:d9:c5:4f:aa:
96:c5:fa:60:3b:2a:42:0d:06:34:25:54:13:52:6e:
69:c0:92:c1:82:a4:9e:03:ee:8c:80:f1:0a:34:5b:
8c:fb:96:71:a2:a6:18:7e:8d:db:00:d4:e4:3a:50:
0d:41:26:e7:69:a2:e2:5d:30:ed:c5:05:1a:6a:85:
69:f7:fb:af:ff:5e:3c:dd:82:93:3b:b7:51:ee:6e:
c2:f0:8d:c9:22:61:85:59:ed:ba:17:b3:24:07:56:
b8:64:59:bf:55:40:1a:36:73:62:e3:ee:00:e6:2b:
48:5b:98:63:df:50:cd:fb:4f:b7:9f:91:73:f6:aa:
82:fb:23:52:3c:45:46:66:3e:eb:29:78:f1:4f:50:
92:6e:88:6c:58:a0:81:97:df:e2:9c:b8:06:59:b4:
dc:8f:70:ed:af:56:fd:33:71:d2:84:8a:3b:b4:41:
57:69:14:b4:cc:6e:65:ad:4a:b3:da:fc:07:66:bd:
dd:a1:21:b3:26:3a:88:fc:fa:9f:b1:42:ea:b0:70:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C7:16:A3:B5:42:F4:03:7C:A5:C3:5B:50:7B:47:0E:CD:2D:74:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:1000::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ed:30:f5:21:1f:49:6d:83:c5:e0:38:84:8d:d3:ce:42:6e:
29:5e:fa:dc:63:29:2a:73:66:e9:f1:ab:81:71:55:05:32:7b:
fc:18:09:d7:23:ba:6b:68:80:d0:c3:6c:03:09:f7:24:bd:7a:
c1:7b:12:86:63:b6:0d:b4:fb:ea:48:cb:7a:9b:bc:53:07:3d:
3d:b2:43:68:b5:29:ca:d7:67:bc:cc:63:6d:96:50:89:a8:7e:
03:eb:a4:df:4c:0b:d0:d7:9b:65:28:ad:6a:86:52:7b:af:d3:
2a:30:93:46:e8:b7:71:4f:d5:30:d8:f4:19:d2:f8:d1:6f:3e:
a3:ed:53:63:b1:ea:8e:df:0d:86:8f:b5:3e:60:44:86:06:62:
fc:14:f7:43:bc:e1:fd:51:96:bd:d7:3b:e7:98:71:28:1d:06:
f7:2b:b1:12:25:63:71:31:c9:23:f3:81:5e:aa:cf:63:8e:a8:
c8:82:eb:48:b9:58:48:ee:f1:a6:6b:c8:d7:f7:da:aa:5a:1a:
5e:96:af:4a:13:0f:1b:0c:5a:8b:64:7f:98:6b:fd:06:9e:37:
1f:40:a5:2f:b6:37:f2:9e:7c:00:1a:2a:ac:2e:1c:30:0a:dd:
e3:c9:2f:d0:3b:21:01:25:35:06:15:fa:60:90:3e:2b:ed:9b:
e8:cf:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:14 2025 by rpki-client