Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
File: 599e0695-4b67-4a37-994a-8c71d61260b3.roa (raw, json)
Hash identifier: MT1GYGnZPUBfe2WCO1wdhy9nZXRMcSIZs3wNpNuvzDc=
Subject key identifier: B1:82:F0:D7:70:09:3C:D9:BC:EF:77:1A:85:85:1C:47:AE:FC:FA:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EAB88472596C4ED9FF4AC1B81C355D544252CB7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ab:88:47:25:96:c4:ed:9f:f4:ac:1b:81:c3:55:d5:44:25:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=59f490a50ee3731f1d454f90d1f2b20720867b8e8790b84731f4c251864dfeae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:da:63:6f:5d:4f:1c:ff:ee:3e:fa:2b:bc:
14:43:16:05:e7:2b:7b:d3:22:cc:ab:e6:98:5b:31:
cb:be:b9:7e:83:04:64:da:50:34:5f:96:1c:31:bb:
7f:5d:7e:b7:0d:05:19:75:30:69:52:6c:58:1b:5a:
75:dd:aa:6b:ff:a1:97:85:42:e6:36:a8:e9:bf:d8:
ef:65:d5:33:ac:b6:8e:ca:b9:ac:e4:02:83:fc:91:
89:bf:4c:0a:52:7e:ec:07:6f:ef:15:da:cb:35:a0:
68:e9:93:9b:5e:f1:4e:b1:f2:74:d6:d5:95:2e:3c:
0b:f2:1d:f6:f8:00:73:82:68:29:c6:ef:f0:59:98:
c8:e8:9e:92:d7:33:96:1f:bd:1f:59:de:f7:21:7c:
0d:d5:20:8a:94:7a:d7:fa:79:cd:c1:1f:aa:cc:22:
19:0b:ec:9a:ca:ef:51:bb:04:39:9f:e2:15:1f:27:
31:2a:be:86:90:e2:3e:eb:40:99:eb:6e:04:67:11:
2b:8e:c2:39:2e:8e:53:87:8b:3a:3c:df:3d:80:c9:
71:ff:e7:31:9b:ae:95:28:b0:5e:4d:07:c5:ef:d1:
be:54:2e:f0:0c:dd:c3:31:56:e4:1c:6d:c3:80:8f:
e4:26:7c:95:2f:a6:2e:33:69:ec:6c:a1:ae:fc:c9:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:F0:D7:70:09:3C:D9:BC:EF:77:1A:85:85:1C:47:AE:FC:FA:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
48:4d:e1:28:20:72:ed:60:5e:55:95:70:c8:4d:8e:a5:11:d7:
e2:fb:f2:1e:fe:e8:af:4c:fb:23:8a:eb:a2:56:63:fe:27:60:
60:a4:f7:3e:63:27:6d:8c:4d:da:c5:20:95:76:70:d4:e7:d4:
06:ef:6d:6b:3e:5f:a6:75:d9:ce:f3:0a:08:8f:02:ec:6f:41:
f6:63:d9:2a:9c:d1:13:da:d1:5e:30:ca:9c:36:a8:66:ed:59:
92:5d:84:15:ff:c2:17:1e:fb:e3:39:9e:ba:98:1d:2e:cd:cc:
af:fe:b5:ee:ca:a7:a2:9c:42:28:1c:6b:2b:cd:d8:97:51:3a:
1b:7b:de:58:10:b9:08:07:ad:81:fa:2c:6f:24:52:27:3d:b6:
28:38:58:e6:87:28:86:cb:74:0d:a9:de:95:55:2c:1a:81:ce:
33:d4:9c:f2:be:31:34:f7:86:73:61:8a:67:17:76:4e:23:96:
0d:b7:6a:20:f4:ca:4d:fe:6f:71:03:2c:fe:2b:3c:c7:70:8c:
61:ed:5c:9f:c4:81:b3:e0:6b:b0:2c:1f:32:fb:11:7e:98:1f:
c9:5a:d4:0b:ec:9c:10:94:74:21:70:4d:d3:1a:66:56:78:85:
9f:be:7c:a5:e4:88:c9:00:01:99:47:a5:3c:9b:c2:c1:5e:27:
6d:c9:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:25 2025 by rpki-client