Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa
File: 4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa (raw, json)
Hash identifier: VGedsGvH3A+DmsoRcmoYmXZeHLzOONNyQT1ylBXRAfQ=
Subject key identifier: 9D:4E:C6:B8:AB:FD:3A:5E:CF:86:C1:61:0C:5B:C1:B9:DE:9B:34:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 372122C669D58EE0506586FF49FDA61648CFA018
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:21:22:c6:69:d5:8e:e0:50:65:86:ff:49:fd:a6:16:48:cf:a0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b453d4a36a6dd21090fef13af94a4eddd99cede75a81913a5a81c6b0df8cdf05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:a4:f8:ff:76:37:cd:a1:02:07:12:7d:24:
ad:26:36:98:b4:69:a5:57:b0:73:71:60:5c:31:d5:
97:4a:98:3e:73:b7:ab:5e:34:f5:d4:fc:28:f0:f8:
e1:94:38:f7:90:bb:aa:1c:c6:a3:09:30:08:a2:28:
74:c6:e5:ca:5b:3d:c5:f8:12:11:db:9a:35:fc:83:
0f:11:d0:75:69:c0:d0:c0:38:5c:aa:ad:54:04:4f:
4d:c2:c9:6e:b3:97:9e:d1:bd:b7:54:2f:dc:9d:0f:
c8:26:af:de:90:b9:2a:98:90:8a:0d:d1:a5:cd:81:
a7:7d:ce:4c:b8:2e:5d:75:00:6a:b1:43:65:2c:3c:
35:d9:9b:33:90:2a:24:e9:5f:8d:6f:8f:4d:56:51:
13:93:5f:4b:df:eb:5c:67:e5:44:f9:b1:89:b2:c6:
1f:de:29:16:1d:22:39:c9:50:1b:ba:02:b1:73:8a:
5a:96:3d:2d:27:15:9f:88:3d:b6:d6:b6:4a:09:11:
d0:ba:65:1f:5a:4e:1c:78:f3:5d:55:f8:12:09:fe:
1c:a3:46:fb:96:23:7c:58:80:d5:bf:b0:5a:35:35:
e6:dd:3d:bc:6b:3a:b0:46:8d:bc:2e:6d:f3:46:81:
10:54:24:49:27:d3:ec:81:68:b3:b7:61:f8:6b:89:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:C6:B8:AB:FD:3A:5E:CF:86:C1:61:0C:5B:C1:B9:DE:9B:34:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4000::/40
Signature Algorithm: sha256WithRSAEncryption
10:dc:a7:5e:a5:e3:35:b4:8c:c0:9e:cb:81:ed:ff:22:11:7c:
19:75:e1:ec:11:e5:11:9b:ef:72:34:69:1d:69:14:60:46:15:
96:36:58:8c:06:70:c2:83:d3:86:7e:ad:b6:07:1e:b5:45:b5:
0c:e0:76:ed:6b:39:00:24:df:fd:b6:f7:79:78:6e:79:8c:ad:
50:ff:48:ff:6e:de:00:32:2d:d7:85:29:b8:3d:8c:2c:b0:14:
2e:e9:63:fc:f9:31:af:de:37:86:ea:a4:70:aa:15:93:49:dd:
56:e1:b2:88:2b:04:82:c8:8c:14:d7:30:bd:80:b9:ed:9f:14:
be:11:0a:fd:43:53:27:22:52:a7:c9:15:63:35:58:37:aa:5c:
08:26:cc:d3:07:b7:6f:86:16:a2:7a:75:72:df:06:44:01:71:
c3:ca:d8:3b:80:dd:16:35:df:6e:18:5e:31:ad:65:7c:60:3d:
19:ab:e6:80:e2:be:fb:cd:9f:f0:cd:95:d6:62:b6:9e:74:1b:
06:8d:07:6c:8d:e4:57:94:a3:a1:1a:11:f8:d4:c8:1b:84:97:
4e:2b:9e:b3:20:6c:5a:a5:86:df:0e:03:79:30:2d:14:19:3e:
4a:3a:35:15:82:69:af:fa:be:a0:8e:10:af:be:1e:db:63:fb:
40:12:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:11 2025 by rpki-client