Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
File: 533769c8-002c-491c-9b99-324fe9f5743c.roa (raw, json)
Hash identifier: VF5MgVeLWtzuT+uC5S1Z7pa90I/0yKWnTneAlU+ZHuw=
Subject key identifier: F6:04:5F:86:9C:99:BE:D9:EB:C1:7A:CA:1D:83:C9:10:0C:B9:97:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D8BB1DAF560052AD16C889E60979544AF5BDF3F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d022::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8b:b1:da:f5:60:05:2a:d1:6c:88:9e:60:97:95:44:af:5b:df:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=68198c7ba080d7f6130390681181b0fa3c0f03304ca63f2fb42d194b9b833c9c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:1d:b8:31:fd:b5:66:18:e8:b7:87:c3:c0:
17:9c:6e:92:4d:7f:7d:91:0f:6f:7f:2f:9d:b6:2f:
b6:48:1f:7d:b1:b6:db:7b:92:f9:3a:bb:32:4d:f8:
a4:71:8e:c9:49:a3:02:c6:43:c0:25:2f:20:a7:b8:
f9:3b:00:fb:e6:02:08:35:db:80:39:56:2d:fa:0b:
41:c8:e7:1a:35:aa:98:35:ec:f3:80:8f:7f:c2:51:
b6:32:24:90:1a:63:e8:7a:35:5f:3b:dd:bb:0b:e5:
d7:f1:35:f4:ba:90:b3:d3:b2:31:63:3a:ce:4a:f5:
3f:19:7b:e4:db:18:64:a4:fd:32:88:f2:5b:9f:d6:
a3:84:13:d0:68:b7:b3:d7:91:9f:77:4b:68:13:f0:
eb:09:ca:8e:50:2b:47:fe:5e:65:01:39:14:b4:b9:
32:bc:6d:2f:8c:60:e1:72:f8:cb:10:aa:cf:4a:df:
98:4d:c3:97:2f:ed:01:66:b1:39:b8:2d:d9:b3:3c:
b7:14:93:05:57:80:55:24:a4:82:f5:48:b2:86:9a:
17:12:1d:4e:13:95:f4:12:0a:9b:e8:f9:93:69:1d:
e4:8e:24:39:8f:dd:70:56:82:10:09:8d:b2:9c:86:
7f:78:09:de:fb:9e:e6:b8:05:36:5d:fb:be:7e:8f:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:04:5F:86:9C:99:BE:D9:EB:C1:7A:CA:1D:83:C9:10:0C:B9:97:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d022::/36
Signature Algorithm: sha256WithRSAEncryption
4a:d7:3c:f8:d8:77:6c:77:56:4e:59:7d:1d:53:be:42:a5:cd:
b5:5f:91:e4:2d:99:02:a5:12:62:92:f8:18:28:dc:a1:b0:2f:
fb:03:48:89:4f:33:45:ca:af:17:83:b7:21:e8:77:4e:e3:75:
70:4c:cc:fb:82:66:0a:33:35:ca:33:80:4b:1a:1e:aa:ba:aa:
01:e9:b2:50:77:53:bb:ee:b7:1d:fb:f6:5f:77:ec:7d:d1:50:
b4:e1:97:a2:07:65:35:26:e6:f5:f2:52:03:44:95:d5:ad:35:
9e:99:0e:b6:82:07:53:ca:cb:86:41:db:49:36:2d:a4:62:4b:
b5:19:01:8d:02:7b:25:ce:e5:56:92:b0:a7:bb:82:39:f7:e2:
1e:4c:4b:ac:7a:aa:cc:8a:47:70:c8:09:c4:d1:f7:2c:fe:48:
e9:7b:9c:34:65:37:cb:a1:c3:35:cc:04:98:9b:d2:ad:34:ac:
17:16:a2:af:a9:e6:c3:00:91:97:64:2e:33:27:d9:bd:56:a1:
7f:68:80:5e:70:d9:47:e9:7f:25:d6:27:af:53:42:76:91:ce:
97:d0:2b:f8:98:2c:ab:e1:b6:c8:b4:52:40:92:97:d8:e9:1c:
78:b0:80:bc:a5:ca:42:d1:53:e2:8b:9e:0e:f0:59:51:a6:eb:
9c:86:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:29 2025 by rpki-client