Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
File: 493f1269-3ba4-4dea-829a-985dda6749ee.roa (raw, json)
Hash identifier: HoJhsN85YTONlHBEZzWPBjuPB83h7nCVrwLJ1Wijz+E=
Subject key identifier: 60:05:F0:8B:C5:07:D7:95:52:19:2D:4F:3E:14:F9:E8:FA:A2:1E:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68295A116DD1BD77CCBD2491B1B02ADE6410240B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:29:5a:11:6d:d1:bd:77:cc:bd:24:91:b1:b0:2a:de:64:10:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=dcc6b2f59cca12a9f72a2a20fdfbce921408eaf0b85fa2d2a87ddf322996e14a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:16:c7:ac:9e:9b:11:29:54:e9:7c:7c:b4:
9b:8d:df:6f:3f:3d:63:fe:74:dd:0e:b9:0f:0e:4d:
3e:a1:e2:7c:a4:68:42:06:a4:f8:e5:07:f5:e3:38:
ad:ef:77:bc:bc:30:f1:ab:80:ba:ee:62:5a:fe:a1:
6c:39:d8:38:1f:aa:90:96:2c:e1:83:b6:94:9b:20:
72:40:3e:a4:cb:eb:e8:d5:bc:0e:6a:71:d2:df:c9:
a0:91:f7:f0:a2:70:1f:a9:5c:d0:d5:fa:b5:23:ed:
c3:34:c9:b6:e8:79:a2:a9:f3:22:af:53:2f:81:10:
8b:3e:23:87:10:82:eb:4f:3f:a6:dd:35:96:93:5e:
9f:c0:1d:90:92:3c:a8:3a:6b:94:d1:7a:a9:92:5e:
5e:47:ee:f5:f9:5c:91:cd:5e:4f:11:33:cf:70:5c:
6f:99:cb:15:d5:d3:14:54:84:5a:81:45:96:c9:83:
44:f5:08:ce:bd:9f:7f:cb:82:09:31:7f:14:7d:71:
b8:f1:5a:40:2f:6e:9e:0b:2a:88:4d:53:89:df:24:
c5:24:ca:c1:ad:1d:36:e7:26:48:95:54:e0:e7:e5:
b7:09:81:a1:6b:b5:31:93:2b:1a:fc:74:c7:e2:95:
e4:1f:28:3a:40:f7:eb:d3:c6:94:f6:60:12:7b:54:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:F0:8B:C5:07:D7:95:52:19:2D:4F:3E:14:F9:E8:FA:A2:1E:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075::/32
Signature Algorithm: sha256WithRSAEncryption
b7:b1:b4:6c:55:39:99:2d:e6:ca:7c:7d:1c:67:50:17:1c:52:
13:c2:ac:1c:e0:84:46:d8:7a:1d:0d:c6:c4:97:d0:00:fd:f8:
28:ea:b1:23:6d:c6:de:88:1c:cc:51:98:10:64:3a:73:d9:f2:
29:85:73:a5:83:41:11:fb:0a:cf:b1:02:26:49:41:f9:02:a9:
47:b3:63:29:ed:ef:3f:56:56:6f:70:d9:e1:d2:3e:20:fa:54:
da:9b:e4:e6:cf:1d:4d:b2:d3:bb:dc:cb:d6:82:75:0e:58:b4:
45:8f:fd:f6:98:d9:a1:29:00:06:15:d3:c3:ae:e3:83:86:fd:
a0:07:96:b5:2f:be:cb:e1:ce:01:ca:1d:06:8b:56:e2:c6:b7:
5c:ee:dd:1c:5f:1a:5e:e0:b5:1f:fc:5a:9c:29:b9:99:6d:f1:
5e:15:a4:91:a6:c0:ca:70:75:7b:62:a5:83:4d:eb:65:50:7f:
56:be:27:ea:bf:64:34:2e:e4:66:8c:ec:57:6a:a5:a8:2f:c1:
39:7c:ec:de:9b:07:3f:26:8d:02:a5:e3:3d:e5:06:6d:7e:cc:
96:bb:be:c0:3e:96:86:ba:47:84:e3:c8:b5:37:7b:6b:52:0a:
d6:0e:06:41:5e:28:2e:e8:62:fa:9c:86:9e:1d:20:01:3b:27:
6d:f4:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:02 2025 by rpki-client