Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
File: 5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa (raw, json)
Hash identifier: trlrefyZqslnN9GFuWrdaeNhaDN5iJQsTMqqunyWeJ8=
Subject key identifier: 1A:EC:2D:F2:C1:2F:06:3F:62:8E:29:53:51:F8:CE:0D:04:5B:CB:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47721FA39697A9BBAE8345E0E9B1BA10F955F05A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:72:1f:a3:96:97:a9:bb:ae:83:45:e0:e9:b1:ba:10:f9:55:f0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=168dcd24b154ed6baa071d80d81ea2e7230f513d41d4733117686a1448610e22, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:96:bd:89:5a:01:50:d1:bf:a0:00:6e:9b:
38:0c:7a:57:29:d0:1e:7a:c8:c8:35:78:bb:cc:fb:
50:cb:d5:b6:fb:31:71:af:bc:2d:94:3f:f4:fb:f6:
b1:31:70:ed:1c:2f:cc:75:92:46:e3:fe:3f:21:40:
fb:57:a5:d3:37:dd:87:02:8a:77:30:44:e1:50:dd:
7d:5c:1b:9d:35:aa:12:ea:bb:af:8f:b2:06:3d:c3:
47:21:78:26:1b:79:12:71:b0:a4:91:17:cd:11:9e:
26:30:4b:cc:a6:d3:25:cf:de:24:07:fa:0b:6b:30:
ce:85:1a:50:7a:4e:f0:4e:35:64:bd:a5:7a:7c:d9:
27:a7:52:08:d2:99:25:9c:75:d5:db:83:51:b0:17:
14:18:1f:28:72:ab:99:3b:9c:90:18:2e:82:e5:0e:
96:07:b2:00:22:48:2b:f0:c6:c0:b8:c5:46:64:3a:
3b:e1:13:2c:b2:b1:f5:05:b0:3f:dd:a5:49:32:b9:
a8:27:3d:3a:40:93:bf:d4:2d:f3:83:1d:1a:6d:a1:
e3:7e:48:12:6c:36:bc:9e:5d:45:86:24:1e:fc:1d:
e7:3a:6e:06:bf:a6:7a:d8:1c:63:f0:d1:22:96:a2:
f2:34:5d:77:9f:52:85:fe:42:85:de:26:32:ed:10:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:2D:F2:C1:2F:06:3F:62:8E:29:53:51:F8:CE:0D:04:5B:CB:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:2c:2a:06:8e:ae:dc:ce:b7:58:8f:85:9b:7a:2d:76:b7:6f:
9f:bb:a7:66:a1:e8:1c:4d:1b:5e:92:b6:45:68:72:07:9c:0a:
fd:c5:f2:c7:d7:68:50:21:a8:e9:7e:23:30:8b:13:ed:d3:d5:
30:18:cc:90:b9:59:45:4f:7e:3d:86:50:00:97:dd:23:df:97:
d4:ec:eb:a6:90:51:15:61:03:0e:e7:81:14:be:59:b4:25:43:
65:68:08:e5:cb:00:4a:b8:30:97:8f:f5:dd:5f:c1:0e:c1:2a:
32:ce:c2:69:c4:21:84:52:75:29:49:d2:48:cd:6c:15:4c:6a:
99:5d:32:42:c6:fa:51:fd:71:f9:7f:b0:48:ff:60:1b:94:89:
96:d1:eb:c9:4f:d7:04:d1:b7:a3:81:92:43:f5:0e:00:eb:e1:
1f:46:6a:66:05:42:d1:79:e6:71:66:23:a9:3a:ae:c3:f9:09:
40:ee:70:9d:47:5a:ff:8d:73:a9:62:d3:1d:a8:85:f6:6d:41:
c8:5d:58:e7:45:04:c3:c3:68:a0:8c:bb:72:94:34:37:2e:21:
68:92:1a:eb:33:c8:40:5a:89:d7:9a:ae:64:e2:e2:4a:ec:06:
84:c3:d5:2a:fd:9d:1f:54:fa:71:67:4c:5c:95:d8:f3:05:ed:
27:9d:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:07:04 2025 by rpki-client