Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
File: 581266ac-af97-4864-a566-36693b593269.roa (raw, json)
Hash identifier: /OdwOUpfb4A9n2C+t3FoxH3/m68Q7Sh8HOJExIwdrgE=
Subject key identifier: AF:F8:0D:6E:66:0E:45:0C:09:B4:B4:3E:2F:C7:BC:E2:C0:82:AF:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E8AE423AA870320B5CCF8723C219AD894D953CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8a:e4:23:aa:87:03:20:b5:cc:f8:72:3c:21:9a:d8:94:d9:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ef19898d3b0b1a136426f89489e29a43df90dc2e7f0f1803614ddd6c8770ac8d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:c3:51:c6:43:2d:e4:cc:59:ee:07:3a:d7:
04:52:ff:83:4e:d8:80:8a:a4:a5:92:2d:f2:a2:fa:
6a:74:0b:c9:c7:28:b3:d0:45:e9:05:ee:cc:dd:c3:
5f:3a:49:e7:39:1e:53:30:a4:a2:36:f7:d8:96:04:
af:70:f9:88:18:72:97:f1:9e:f7:43:88:9a:9c:f0:
06:1f:e6:c1:d8:f2:7b:15:05:32:1f:bd:30:1d:f6:
c8:1e:25:8e:e3:82:cd:0d:4d:d6:d4:89:f3:f0:e7:
f6:a0:5f:14:66:9c:7b:e2:04:6a:6d:68:22:cc:94:
15:fa:83:89:73:0a:5a:1e:da:d7:64:c0:63:a3:e8:
10:9b:0c:f0:c2:ea:f2:5d:0f:87:11:ff:44:19:72:
8c:91:44:6d:cb:76:26:a0:aa:7f:bc:7c:6a:c9:1a:
3d:ad:83:db:e6:31:76:9c:f1:15:33:4f:05:23:62:
d4:1e:1c:08:a1:ea:b4:3a:cc:72:52:d9:aa:f4:be:
9b:ba:1f:d9:bd:d7:e9:30:f4:3e:c3:cf:dc:e8:e5:
3c:34:29:7e:04:e6:a2:f1:cf:29:7f:98:2a:00:dc:
5c:f0:91:5f:8c:cf:6e:fb:dc:cd:57:db:77:ea:e0:
ed:24:79:e8:e7:93:e3:61:4e:b1:93:52:c1:b6:3e:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:0D:6E:66:0E:45:0C:09:B4:B4:3E:2F:C7:BC:E2:C0:82:AF:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:f9:7a:c1:6b:5d:1e:64:aa:44:a1:49:8c:c3:3f:31:ae:b9:
22:a0:28:75:0f:37:e2:5f:27:5a:a3:a9:3a:75:1f:fb:c3:68:
bb:00:6f:84:07:55:12:e2:6b:30:54:8a:c7:09:b0:c8:90:42:
37:bb:ee:ea:5f:ad:b8:8c:47:78:2d:9d:6f:a3:35:dc:33:f9:
0b:b5:4e:49:b7:e4:7c:5b:94:6f:62:43:22:81:a3:72:63:0f:
b4:c0:4a:ee:10:52:f4:fa:d1:fa:1f:b9:f3:4c:ca:22:00:90:
ce:e7:aa:cd:ee:10:e0:bc:dc:de:fb:fb:5b:63:14:c6:a4:9b:
24:13:48:4c:ab:23:7a:dd:b7:b8:bb:34:15:fc:51:97:26:e3:
ab:d7:68:99:7b:b4:43:b4:14:fa:b5:f9:35:d3:ba:6e:78:47:
9e:e9:2a:70:a2:1d:0a:e4:53:a4:33:95:6d:f7:0b:31:85:70:
f1:cc:c0:09:43:04:e8:64:4b:d9:af:b5:33:2b:22:9a:99:f5:
a7:47:3c:3a:91:9e:99:f4:d9:82:d3:50:05:90:13:86:b6:e2:
ce:f6:9a:35:b3:93:9f:39:6f:44:99:00:bb:2a:c6:5e:ef:d0:
91:23:9e:c9:c6:d4:39:6f:9f:9c:6e:0d:69:5e:34:19:46:9b:
72:41:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:36 2025 by rpki-client