Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
File: 546828d4-9f43-44c2-bff8-aafeddca4e25.roa (raw, json)
Hash identifier: 1SxOzigfFVYmRFITOrfkZoKL+guh3wyyf/ScbaoC0RQ=
Subject key identifier: C5:0E:C8:4D:0D:41:CA:34:90:7D:C6:01:33:74:A8:46:C4:57:32:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AB5B85E2C7B34452BD238E5F50B7646A88830B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b5:b8:5e:2c:7b:34:45:2b:d2:38:e5:f5:0b:76:46:a8:88:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6b48c8910ef92471d6fa2eb7c151284ae731b22deb392e0ee81ca0c0d9a71537, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:da:2f:67:97:8d:89:25:7f:74:86:04:55:
49:e8:e0:df:3a:ca:90:0e:a2:15:94:d7:4a:9c:24:
de:3f:ce:bf:13:eb:94:6e:ab:40:b6:e8:76:95:ac:
16:86:fe:78:0c:3d:58:e2:8d:81:1a:28:f4:e6:e0:
bc:99:d8:e8:80:a5:ea:8a:d1:39:ee:34:06:50:32:
65:c1:56:84:df:1d:88:c0:5a:09:b8:a2:03:4c:1e:
54:24:cd:59:9a:be:bd:96:a4:52:51:79:07:55:05:
67:3f:fd:28:93:8d:0d:e7:d1:cd:40:42:99:a8:6a:
7c:c1:8d:7d:12:5d:8a:51:ef:8c:70:da:c4:20:30:
4d:22:dc:ff:04:68:58:28:62:12:2f:df:1e:cb:6f:
9d:93:2e:2f:09:38:c6:26:54:7a:e4:21:9c:45:d4:
0b:bd:25:a8:96:95:1a:e1:f2:63:77:dc:b4:32:b4:
a9:77:15:d8:42:18:67:cc:60:d4:b9:c7:75:65:23:
34:4b:b2:84:69:18:90:0f:09:2f:07:8e:d2:6a:3f:
6f:a9:de:03:f4:1f:64:c7:c7:bc:a2:1d:a4:2a:32:
9c:f1:88:6a:6b:e7:eb:95:b4:ab:30:6a:72:8e:b2:
11:58:db:31:e1:95:23:c1:85:1c:b3:2e:26:25:97:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:C8:4D:0D:41:CA:34:90:7D:C6:01:33:74:A8:46:C4:57:32:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e040::/48
Signature Algorithm: sha256WithRSAEncryption
26:b7:47:58:38:01:34:b0:55:bd:2a:9b:73:15:06:19:c4:e7:
46:25:b3:ed:26:2a:f7:ff:37:7d:9a:c7:27:df:cd:4a:5c:ce:
a0:d7:84:80:6b:27:3a:8f:bd:44:7a:23:d4:8e:13:9a:09:1a:
68:c5:ab:bb:d0:e6:c0:2e:50:4d:04:c9:6e:b6:8b:9f:cd:9c:
24:90:a0:c7:b6:8b:af:d5:ad:00:36:c7:2f:10:5a:82:8f:1a:
19:e2:70:7c:57:f5:67:0c:6d:5e:fb:ad:56:51:b6:25:8a:02:
ec:1d:af:2d:43:c2:fb:47:8a:cd:76:44:ba:8c:9b:30:e2:db:
30:7c:8a:ee:1d:26:e1:42:e4:6f:0a:ea:fc:ec:d3:44:2c:91:
ef:36:77:1a:84:3b:31:71:50:e1:fc:70:00:93:ee:d1:80:f0:
42:fd:a8:13:de:b8:39:fa:70:ba:ae:ea:61:c6:d0:b0:40:8f:
a6:29:86:1a:b8:0d:f7:bb:86:6e:86:d7:d8:00:87:9f:37:f9:
9b:f2:a8:58:cd:57:ca:1d:a4:3b:13:e6:50:2a:f9:c9:25:b2:
2c:a0:f4:f8:2f:b1:5a:65:93:bd:8e:a1:f3:c1:e8:60:ca:5f:
59:99:32:06:9d:a6:55:c0:3b:8c:46:12:7d:65:28:88:06:18:
5b:eb:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:43 2025 by rpki-client