Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
File: 48ce7dfe-434d-4b57-b520-9001ae26be85.roa (raw, json)
Hash identifier: m51Pwezz99cI5WSm6g5QHw0R6BV66PalLUiDpzwJHCY=
Subject key identifier: 66:E2:DE:88:26:83:94:F2:80:A0:9D:0B:61:FB:56:1E:EA:04:AD:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D1274FC4E07CDC7480838655BF65B32995777F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:12:74:fc:4e:07:cd:c7:48:08:38:65:5b:f6:5b:32:99:57:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=adb6b387485d0733e831760bc4e0692194dcf4d1370c22f36a0060749dc31c4a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:77:a6:6a:27:c3:a3:f7:d5:64:5d:e2:12:
ef:3b:a0:12:87:36:54:f4:d3:b9:52:eb:f7:a8:b5:
b7:6a:1d:0d:69:0b:ed:11:a0:ee:94:b7:9f:c3:d8:
0d:b0:65:b9:1f:6b:97:1e:77:6b:7c:68:5e:42:f2:
64:54:92:b2:83:dd:1e:01:dc:de:c0:89:f1:52:a7:
3e:0e:50:63:d3:49:fe:e8:95:00:5c:66:b0:34:82:
09:2d:71:b5:3a:a0:6f:99:6c:b7:54:f4:f7:f7:0c:
83:0d:9c:6b:55:46:88:b9:7e:27:4c:84:a1:37:ce:
04:05:60:89:e4:b9:a5:90:e5:66:af:d2:72:6d:f0:
a8:74:ed:b6:c6:49:ed:4d:37:ba:39:6c:9d:23:fd:
ca:72:21:08:ba:0c:a8:89:69:8a:c5:65:e1:09:ed:
ba:45:ab:74:a6:d4:fa:59:d0:8b:2c:47:21:29:0e:
5e:29:27:86:5a:90:43:90:36:b8:39:61:da:dd:44:
31:ba:7c:47:68:e7:72:41:f9:e1:67:a4:e6:a5:a3:
c2:1e:d3:9e:c7:14:0f:a5:8e:fb:d3:ce:3e:a9:e8:
6c:b6:55:a9:5c:b9:66:a7:18:ea:50:91:bd:d8:2a:
7c:aa:c3:18:b4:c9:7b:6b:6c:6d:3d:5b:ce:0a:fb:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E2:DE:88:26:83:94:F2:80:A0:9D:0B:61:FB:56:1E:EA:04:AD:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8010::/48
Signature Algorithm: sha256WithRSAEncryption
5d:c1:81:bd:45:c1:2d:31:7d:fa:5b:cf:b3:52:c8:36:02:48:
94:bb:c3:f8:5a:8d:db:a0:e3:d2:ad:2c:38:64:ca:5f:82:f9:
14:f7:a2:b7:bd:bf:4c:a8:bb:02:81:49:3d:3c:31:ad:86:bd:
fd:ed:37:cc:02:e9:60:2a:bf:86:7e:90:57:03:2f:2a:cd:b5:
41:36:8e:d2:db:4f:fe:f6:22:d0:4b:ab:f7:24:ee:4b:1c:b5:
4d:4f:4c:9d:af:6a:50:f2:82:6d:bd:2d:37:97:9a:a1:a8:e7:
58:e8:79:1e:f4:8e:55:85:f8:60:7c:ed:4f:04:4b:12:27:26:
b4:a9:97:d6:97:9f:43:7e:d9:b0:60:e3:0f:09:e9:9c:87:43:
31:25:d6:a9:7e:73:f2:34:6d:75:3b:00:55:7f:7c:e3:bf:53:
bb:ed:67:3e:8e:a8:97:6b:8c:72:ce:29:8b:2a:26:76:35:d7:
1b:5b:46:0f:a4:5d:41:38:2c:66:7e:16:53:68:cf:f4:f8:23:
d3:56:51:5c:85:48:18:03:f1:f9:11:ba:eb:98:63:80:8d:47:
1f:72:66:92:f3:f1:8a:c9:0d:5f:37:9b:9f:43:8b:b8:a9:44:
1e:74:85:56:11:bc:18:98:cc:f4:a6:4c:be:ef:99:dd:20:66:
1b:b2:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:43:11 2025 by rpki-client