Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
File: 5acd35f8-42dc-4211-8060-407321cbd4dd.roa (raw, json)
Hash identifier: jB5ecz0xsMf62uy9FbB/UoNCTHoHhNoHm2aLxgVreWc=
Subject key identifier: 1C:E2:0C:6F:9C:55:1A:C3:D7:BB:55:3A:A1:4D:8D:0C:C4:EB:9D:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1339C01A78D191BC6E1F7C876F49CE0AAEBCA5F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:39:c0:1a:78:d1:91:bc:6e:1f:7c:87:6f:49:ce:0a:ae:bc:a5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=82bcc8b05a4146a5c82d3dbaaa98ca0e96968549914368ba20ec4a2566ccd67e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:4c:7a:06:8d:9c:01:8a:5c:c2:24:1f:5d:
2b:20:f1:4b:01:38:41:9d:df:1b:d2:30:26:20:ca:
85:fc:48:e1:5d:02:1a:82:36:de:18:51:9a:ac:39:
e2:b6:8f:5b:64:b5:32:2d:2a:9a:74:73:c1:c4:0e:
ab:08:69:39:df:e3:97:1f:39:df:4d:9a:20:9c:9c:
66:9d:c0:72:9d:a6:57:70:e6:f0:1d:10:cb:b8:56:
5f:1f:96:7f:4c:fc:bb:00:0e:25:fa:28:3c:cd:a4:
4b:80:b5:0a:e6:f8:e8:25:d6:85:91:53:13:f9:ce:
fb:6a:19:9a:c8:9e:78:a2:e7:5a:01:c7:ce:53:24:
5b:d9:cc:5c:fc:88:1c:88:12:4d:dc:3c:3c:e3:26:
45:24:af:e7:29:79:d9:90:dd:83:dd:6d:a5:3a:7e:
59:cb:95:0e:6a:ce:71:52:e0:6e:76:ad:d4:3b:61:
9e:1d:fa:09:cf:1c:4d:ec:46:23:14:d0:59:1f:3c:
06:fb:c4:35:e3:62:62:69:97:46:bc:53:a8:c0:61:
da:9f:7d:8b:2d:bb:d5:0f:b5:86:6b:86:b4:f8:e0:
b6:17:79:bb:4e:4f:3c:14:62:e9:f3:12:e1:5d:9a:
a3:96:21:df:6d:23:13:30:cf:47:89:e3:a7:e4:e1:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:0C:6F:9C:55:1A:C3:D7:BB:55:3A:A1:4D:8D:0C:C4:EB:9D:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6040::/46
Signature Algorithm: sha256WithRSAEncryption
3c:e4:95:e0:4a:ca:e5:8a:e0:22:46:c0:e7:a4:1a:c5:5d:63:
92:91:06:5a:6d:e8:9f:b8:10:a7:14:24:41:61:6e:44:33:c4:
63:06:58:dc:e5:90:bf:59:64:cb:52:3b:b7:29:a0:d2:7c:2a:
6b:6a:5d:ea:2b:bc:cb:d0:bb:f1:f8:04:5f:d7:bc:3f:6f:d7:
8b:4e:e8:7b:e5:3c:a1:8f:ac:72:7a:51:6e:04:20:2b:a2:87:
3a:ca:de:ed:2d:f6:98:62:d0:c9:e2:d2:7e:a1:bb:eb:6d:98:
4f:04:f7:d5:bc:a7:a5:8c:e5:17:b1:08:04:b2:8f:bc:33:ed:
a3:0b:31:de:98:11:31:c0:40:b5:2e:da:43:66:98:38:ce:ec:
59:4b:ce:ea:8f:ab:75:a2:4e:a9:25:ed:63:28:47:f2:6e:4c:
5f:30:fc:fc:05:c3:a8:f9:67:eb:57:68:16:83:9c:5f:01:cd:
78:0e:ed:36:b1:49:0d:a3:ec:76:c2:0e:f1:e0:6d:d2:3d:f8:
db:7f:73:0b:a3:49:3e:e2:f6:df:4b:de:90:84:d7:91:e2:c8:
28:44:48:df:f5:01:11:a2:ac:a2:fe:ab:70:9a:ac:e3:fd:14:
80:08:07:f3:5d:8d:9f:b0:ae:f4:cc:a2:f4:31:64:2c:02:95:
e5:64:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:20 2025 by rpki-client