Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
File: 541034be-1844-4bf7-9c43-91bf5b83fa3d.roa (raw, json)
Hash identifier: I0UCsCjmEZ/1dY+Cu6FWR2bMGbzlvorg1lQwZoEmarI=
Subject key identifier: 04:CB:D3:29:4D:CA:83:B7:5F:2F:C3:D3:36:B9:CE:A5:E0:96:95:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 528BD5D9E31A8CEC2CD9C55803436E95D5B00A03
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8b:d5:d9:e3:1a:8c:ec:2c:d9:c5:58:03:43:6e:95:d5:b0:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c01ad73aa4c8f681fe0f390eac30e7c3ba135249ea272ba157425a168af19b24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:95:f5:b3:86:cb:9c:7a:39:32:da:78:f5:
13:3e:17:90:f1:c3:a4:1c:b1:3e:a1:91:af:ee:24:
de:1c:36:99:cb:a1:6a:12:3a:8a:7b:05:29:e2:73:
64:07:5c:01:d0:d7:3e:d0:25:e1:be:fe:34:ee:4f:
c0:cb:a1:ba:a1:e6:17:25:44:3a:7a:55:2b:e2:5f:
6a:76:05:6d:fa:57:d1:53:ab:d3:d1:f5:df:ca:d7:
ed:06:82:2b:86:f1:90:68:ca:3c:f9:f8:13:c9:cb:
0f:e5:e7:07:cb:2b:e1:75:97:18:8a:7f:1b:a9:92:
e4:2e:68:86:a3:e3:dd:4d:dc:06:eb:67:2c:93:f6:
f9:bd:ee:56:e8:76:4b:d7:d6:9e:3e:3e:3c:16:8c:
d4:b4:a2:24:fd:8a:33:f4:74:69:61:6b:c3:63:6c:
a9:01:11:b0:a1:b2:10:cc:d3:2d:c4:6f:75:11:a4:
e9:36:67:dd:1c:5a:5c:ba:a7:e9:96:9c:f4:4c:5c:
2f:f9:17:f8:ba:c3:d9:8b:1c:57:2c:8a:68:28:dc:
6c:86:35:32:14:e5:86:2d:03:8e:f8:29:98:3d:fb:
fe:ea:41:fd:3b:7e:b0:3b:f3:98:07:7b:7f:63:0b:
e0:f2:3b:45:05:3f:ff:31:6b:c9:40:2d:75:fe:11:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:D3:29:4D:CA:83:B7:5F:2F:C3:D3:36:B9:CE:A5:E0:96:95:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/40
Signature Algorithm: sha256WithRSAEncryption
49:dc:40:57:42:fe:2e:61:bf:84:28:73:3f:5b:9f:72:be:f9:
54:72:c8:6f:f5:0a:c6:67:9d:a6:86:29:72:d0:57:f1:85:aa:
34:37:37:50:e2:ef:c9:5f:6f:0e:9a:77:50:ad:f8:b6:48:c7:
bb:24:ab:c1:a8:c3:57:f6:2e:24:12:eb:d5:c2:fa:a1:c1:0b:
8b:5e:b6:54:7f:a5:fe:81:a9:00:f2:51:d6:ba:27:06:5e:65:
97:8d:99:50:25:02:2c:83:b3:56:2b:ed:50:6b:16:bc:22:8a:
e6:16:56:19:32:31:8a:57:0e:ff:e4:c1:f9:5a:f8:39:cc:80:
28:bf:9e:c7:ce:ff:f2:a6:fd:8f:27:92:27:8b:e8:e1:e9:a1:
46:24:c4:4d:cf:1d:1d:37:ca:52:60:34:fe:82:6a:9e:e5:91:
ba:b8:61:b0:dc:e1:67:65:a1:e4:ab:3a:8f:08:d8:13:61:f6:
bb:90:cb:45:cb:9b:e4:4f:cf:e4:73:ba:56:56:ab:37:6b:f2:
0b:55:45:5b:62:60:47:e7:a8:de:e0:ca:ea:3f:11:f4:d3:c6:
66:eb:84:3a:bc:15:8e:4e:86:d5:33:62:b4:17:99:3c:bf:94:
72:56:8a:60:69:14:b8:79:07:79:9b:25:a5:34:7e:af:35:78:
b9:d7:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:34 2025 by rpki-client