Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa
File: 58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa (raw, json)
Hash identifier: sbQVLhvzC7Jc15SAaO+/8K8yIRTbdVMaZbqL9N7m818=
Subject key identifier: 40:3E:5A:A6:F1:F7:AB:EC:F8:E1:F8:4C:63:85:B9:4C:17:45:38:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64C28D31B52DC2735C9E8B9459841BEAD846AF17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c2:8d:31:b5:2d:c2:73:5c:9e:8b:94:59:84:1b:ea:d8:46:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=20a0c7a019058d9f82fb21a8ea3bf51bc1e0898612e22fbdcb797769ec05ddcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:45:74:ac:7c:9b:30:90:43:50:a1:50:e0:
9d:aa:6b:b2:59:34:24:73:93:2a:6f:fe:c8:99:05:
a7:4f:de:0a:fe:09:0f:a4:18:52:f8:66:f8:ac:17:
0b:0f:cc:f0:1c:4a:6c:98:38:cb:88:98:df:92:5b:
88:75:c8:1e:8a:ba:e9:06:38:2e:2a:68:3f:ae:ef:
3e:05:ab:b2:74:b1:0f:2a:b9:15:b9:2c:b0:af:12:
63:79:4d:16:3c:0f:2a:a6:20:d2:0d:e9:0f:a6:61:
57:52:3c:80:36:bf:b4:04:20:03:93:c7:de:0a:3e:
36:0c:76:d4:91:da:a1:2d:30:4b:1d:c7:1a:04:0c:
54:f2:54:8d:89:9a:a4:31:f6:1a:1d:95:d5:d7:2b:
5b:bf:73:67:66:30:c6:b3:f1:73:94:31:c2:36:a6:
19:87:59:d7:62:08:c5:21:bb:06:e4:81:37:23:54:
31:ef:54:4d:d9:b9:60:be:bf:c6:6c:5a:2d:3c:3b:
0c:31:ba:c4:ba:d6:cc:5c:3d:0a:f7:4d:97:23:5c:
b1:ea:90:ac:74:e3:3b:0a:4a:b2:7c:cb:17:20:5e:
a8:b1:02:ec:8b:a8:2f:0f:d5:ca:04:7c:85:b2:21:
44:c3:9e:2d:fa:a4:46:bd:a5:da:70:a5:28:7c:c5:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:5A:A6:F1:F7:AB:EC:F8:E1:F8:4C:63:85:B9:4C:17:45:38:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2040::/48
Signature Algorithm: sha256WithRSAEncryption
48:d1:20:50:de:47:40:9b:42:af:19:d1:8e:6a:be:fa:bc:b5:
20:ff:a5:1c:36:34:84:4c:07:81:10:c8:f2:17:56:33:77:19:
7a:33:91:78:f2:ec:df:92:fd:99:31:dd:8a:24:a8:f9:14:66:
d3:58:9c:58:da:7e:03:e0:e7:7a:3e:8f:cc:47:a4:4a:3b:8f:
68:8b:b3:f4:d4:92:ae:92:7b:ce:6d:2b:94:68:2e:9f:36:68:
68:f7:24:10:2e:a4:06:3f:a4:28:14:bf:71:82:04:ed:b5:47:
88:9f:72:ad:72:cd:33:cb:cf:a3:bb:25:05:21:09:40:f1:bc:
66:96:a4:8c:71:5c:35:fa:c4:ca:26:b6:65:39:91:fd:63:83:
0a:85:21:82:3d:1a:c0:b2:2c:5e:cc:51:89:f1:71:84:aa:c9:
9e:f3:f4:64:aa:ed:c4:f3:9f:3f:12:f2:77:5b:49:6b:2a:54:
ac:f1:69:c0:f3:34:b2:9f:96:22:1c:be:0f:dd:5b:27:51:f5:
13:aa:c4:3d:ab:8c:63:94:f0:40:92:5b:cd:2b:28:f7:ff:76:
98:3b:66:85:b1:e8:e0:d5:dc:5c:ab:9c:30:fa:44:dc:4c:f5:
00:54:05:49:2b:13:63:91:ae:ac:e6:11:48:95:7f:e8:64:cc:
97:9f:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:51 2025 by rpki-client