Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
File: 56c31249-f32b-4fc4-a69f-07420913a101.roa (raw, json)
Hash identifier: QmeOyTkn/AwoFVi4I2HeylJIl6pwIzMcdFPWDY9eEp8=
Subject key identifier: 3E:79:AB:39:C8:17:B1:38:ED:5D:74:20:0B:B4:DE:AF:4E:05:61:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67EB1DE0556FAA7D5C79A34EFE54AA258C8A3F3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:eb:1d:e0:55:6f:aa:7d:5c:79:a3:4e:fe:54:aa:25:8c:8a:3f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=795bd7bd828c95445d299cfd1040691931d73eca430b8f7a2168d3a6ba339eb5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:48:33:6a:84:fb:91:8a:f4:19:c4:cf:df:
4c:58:22:c9:43:fc:92:d9:f5:a2:f1:cb:41:a3:43:
54:47:5c:ed:a0:9d:58:af:5c:da:12:f3:25:2a:11:
b4:6a:56:ad:e8:56:79:7f:24:b4:be:e6:2f:3e:ce:
4b:97:33:bd:54:f5:61:76:2d:b3:d8:dd:c4:c2:a1:
2f:93:ae:ba:18:40:0f:5f:cc:50:30:62:73:29:fd:
bd:10:cc:6a:b7:9d:26:5e:de:d3:ee:45:7c:ed:7f:
52:b6:1e:a5:00:f4:2a:08:1a:25:00:13:c7:ee:7e:
a8:96:cd:bd:30:32:93:b8:1a:3f:10:be:72:b9:15:
ac:cd:8f:8a:2a:d4:5f:ba:0b:78:68:d6:7c:b9:f9:
8b:db:4a:ed:09:75:3e:37:b6:b9:e0:cd:0c:62:85:
df:45:22:8d:1c:6c:47:a8:0a:67:c4:5f:c5:ba:58:
5a:ca:37:bc:50:68:d7:02:0e:df:c3:c0:ea:19:59:
9e:0f:f5:80:35:f3:fc:40:0b:a7:fc:59:70:ce:03:
6a:51:18:f4:09:6d:ff:5f:ea:10:70:a1:46:c6:50:
32:18:0e:bd:b7:8f:27:4e:9a:4f:b9:73:a0:6a:73:
ef:94:da:19:e8:1a:6f:5e:3b:d6:68:70:d0:b6:dc:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:AB:39:C8:17:B1:38:ED:5D:74:20:0B:B4:DE:AF:4E:05:61:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4000::/40
Signature Algorithm: sha256WithRSAEncryption
2d:5a:91:1e:e1:a9:71:8c:18:7d:4a:0e:d8:52:12:51:69:f3:
ca:50:b8:6b:37:a0:06:35:61:37:25:42:36:2e:e3:e5:84:db:
6b:e3:d9:71:cc:72:81:bb:37:b0:2b:ed:f1:1b:95:5d:ab:ef:
1d:88:19:81:8b:4d:25:4d:50:4d:01:4b:f6:2e:5a:05:b0:28:
0a:ee:42:bb:ed:a0:12:0d:d1:38:f2:05:40:76:70:57:d1:cc:
98:79:f0:15:d0:98:d4:75:2f:52:db:e0:8f:d4:09:86:f1:ad:
93:04:95:d6:9d:53:c7:76:b6:ee:08:f4:3a:9e:6b:7b:ed:d2:
d1:0c:1c:98:e5:f3:14:49:83:23:52:30:f5:8c:9d:27:36:37:
a9:58:d6:72:72:76:e5:9f:59:9d:dc:12:a3:4b:2c:75:4c:00:
8f:e1:63:88:a0:d3:7c:d8:9e:d0:2c:38:21:39:20:11:bb:24:
b3:4f:72:6b:7e:cb:cc:9d:88:15:7a:fa:06:a5:50:9f:76:67:
0e:88:f7:0e:e2:b2:c3:50:b1:ef:d9:aa:b0:47:88:94:24:f8:
5f:90:5e:95:1e:87:02:7d:14:db:83:f8:5c:74:76:27:47:21:
4f:35:91:c2:01:54:af:da:df:55:a6:47:25:81:f4:f9:e0:c9:
4e:fd:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:01 2025 by rpki-client