Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
File: 4e84f0a8-9d20-4219-b641-9a6905a033d9.roa (raw, json)
Hash identifier: Nh0/ypQQp8SO7gfjvBy5NMN0S3g6Lr0PLBuJ8q7oJfA=
Subject key identifier: AD:AC:A8:C2:CD:8B:3E:61:19:D9:BA:1A:CA:31:73:97:53:48:56:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CA17918CF14D9F068BC346021AC7F8AA06276EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a1:79:18:cf:14:d9:f0:68:bc:34:60:21:ac:7f:8a:a0:62:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=01c26834ba9231e7c3cf8330fc2da547b7a0e2eba2627ab81509d403469c9b44, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:47:34:6d:b4:4e:4b:e1:8a:e7:98:38:ed:
ca:26:41:01:bb:39:2e:b9:98:3d:60:b2:61:9c:e0:
4b:ff:ad:f1:25:f0:04:91:e8:1a:6e:28:d9:34:21:
f3:a9:ba:69:2b:7b:f2:22:e1:c5:3d:c2:7b:08:f1:
a6:b5:7c:27:08:b3:b2:2e:0b:5d:23:75:81:4c:1d:
38:b2:a0:12:5b:fe:e3:18:fb:74:fb:1e:3b:13:81:
90:28:0b:79:b8:c9:21:45:ee:c2:91:8a:1f:75:0f:
cd:a5:2d:d1:68:11:04:cb:98:fc:15:5f:64:9f:94:
d3:82:9c:c8:7c:59:e5:58:95:67:fe:8c:ee:1c:ce:
c4:14:6b:94:ea:06:5c:48:70:a7:36:e8:0b:f8:c1:
92:1c:8e:90:ba:3f:30:74:c3:e8:9d:e6:fe:48:6b:
3e:69:60:82:2b:cc:fb:49:92:69:79:71:40:01:76:
f2:63:f9:68:3d:c0:de:ec:23:5d:f4:7d:c5:d2:98:
c1:65:75:53:a2:88:ab:2b:c4:92:5f:d2:9e:3b:3b:
65:dc:98:8f:06:39:77:c5:ac:48:b5:5e:8a:cf:95:
7f:19:ef:4f:26:2b:f8:27:db:79:46:3f:69:28:36:
58:31:e0:27:90:79:2e:6d:46:82:99:e1:64:5c:be:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:A8:C2:CD:8B:3E:61:19:D9:BA:1A:CA:31:73:97:53:48:56:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a040::/48
Signature Algorithm: sha256WithRSAEncryption
82:4e:57:45:27:1b:c0:62:47:d3:c3:b0:1d:a2:41:39:59:ef:
a8:d9:df:35:cb:45:09:fe:36:73:b0:fd:d4:e2:13:99:18:28:
4f:5f:4f:f1:02:92:0f:a4:bb:75:d0:7e:40:d3:40:10:7c:5c:
dc:87:d2:73:d9:c7:42:06:66:97:cb:70:e7:dd:c0:aa:ce:f0:
38:96:ab:4e:54:1a:11:91:35:43:45:f4:49:3c:07:ff:97:ff:
70:66:00:74:16:74:1e:25:3d:44:2d:40:75:8f:a8:9b:69:4a:
55:7f:3f:5f:30:2f:40:d2:a1:00:83:46:f9:f5:ad:a9:a4:aa:
43:a4:51:3d:c8:24:4d:b2:1b:24:dd:71:07:28:be:3a:bd:0f:
23:a2:a7:6f:ca:69:8c:e5:53:a7:28:ef:2c:02:86:a5:0d:e8:
ec:15:67:d2:91:18:95:eb:f1:91:b5:df:9d:43:a5:1b:9e:88:
a6:f8:d9:13:d2:ad:72:aa:8c:0f:41:16:0b:7b:95:ac:c6:e9:
21:ae:74:89:e8:9d:00:e2:1a:2b:fb:2b:ca:80:c3:7f:f5:c3:
75:e0:6f:30:67:b2:a2:6c:f2:d5:90:69:c3:c1:1c:90:74:ab:
1c:81:48:60:10:27:cc:02:f4:39:66:62:f9:ca:fe:8f:be:41:
c7:74:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:22 2025 by rpki-client