Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c57a644-0d1c-4126-9684-e345f93c1560.roa
File: 5c57a644-0d1c-4126-9684-e345f93c1560.roa (raw, json)
Hash identifier: xL03knaRcCMg/+trWK1qTpxFknW4gSA8WPaE478aGHY=
Subject key identifier: 94:B6:C1:52:E4:6B:1B:45:5A:09:11:5A:D4:80:CE:34:05:43:53:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B51D267D840EED551B02BE17665CC1B6D47640C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c57a644-0d1c-4126-9684-e345f93c1560.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:9040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:51:d2:67:d8:40:ee:d5:51:b0:2b:e1:76:65:cc:1b:6d:47:64:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f7022374df7c78aeeec7480e1282f24dcac2baaab23d451efc4322f9c1f90239, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:91:7b:2e:c6:1a:78:ea:da:8f:2c:17:92:
81:60:6a:dd:59:39:ab:a7:84:20:dc:0b:05:7f:60:
25:83:06:69:6a:0c:98:17:67:42:dc:ba:f3:4a:4d:
cc:08:bc:90:5b:26:81:81:dd:6e:22:9a:6d:1b:26:
e4:90:5a:76:44:30:9b:81:a9:5a:e7:f8:da:ff:0f:
dc:90:5b:e8:39:0e:03:a8:26:a9:53:78:34:e2:58:
71:37:01:b0:2a:ce:64:2b:d2:40:81:b3:43:44:05:
0f:76:35:86:b4:a1:79:77:bf:84:b6:3d:06:12:cd:
9c:fc:2b:1a:14:d9:b3:2d:35:c4:30:92:ea:f2:6b:
47:d4:8e:e1:69:31:01:16:24:da:10:83:a3:09:87:
4a:6c:0c:48:3e:43:ee:2d:5d:9b:7f:e5:48:b8:d5:
57:bc:b1:c0:20:cb:13:ae:ae:7e:85:98:a9:2e:d6:
a1:85:a0:90:03:17:83:b6:f9:19:73:d0:c2:bc:fa:
4e:a3:24:78:da:92:3c:ec:98:78:b4:50:71:af:11:
78:d5:6c:cb:cc:e9:1b:36:5c:bb:e5:47:d1:5c:9a:
9d:80:fd:08:bd:e1:d8:6d:3b:9b:ed:a6:ba:47:44:
1b:05:02:67:49:8a:7c:e9:4d:f5:f0:ba:2e:69:05:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B6:C1:52:E4:6B:1B:45:5A:09:11:5A:D4:80:CE:34:05:43:53:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c57a644-0d1c-4126-9684-e345f93c1560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:9040::/48
Signature Algorithm: sha256WithRSAEncryption
13:6f:88:ba:0c:f2:68:8f:a4:bf:62:bc:9b:ff:5b:9e:a0:97:
ed:62:51:4e:8e:27:c9:db:b2:82:4e:bd:58:34:02:20:69:7e:
24:5f:f7:35:ec:f1:87:c0:c4:68:ef:bb:e2:bc:25:31:f3:07:
c7:41:98:11:b5:37:0b:46:a1:f3:c3:32:69:f2:d5:8f:02:21:
34:c0:d3:bd:de:23:42:ab:de:a8:ea:c9:2f:f8:f6:b9:64:30:
f0:4d:ef:ba:47:aa:27:bc:02:ca:3f:22:fa:91:ec:9c:4f:39:
a1:5b:dd:2e:dd:f7:e1:cc:f1:44:92:cf:0b:ed:90:7f:48:0a:
98:a0:a1:15:53:19:a2:cc:47:dc:16:53:19:59:b7:1d:f1:6e:
aa:45:67:be:d7:fe:77:4e:e2:95:ec:04:3e:38:05:0a:64:86:
08:c8:b8:ac:e5:9b:46:88:71:c1:c9:00:1a:e4:22:9d:57:d3:
bf:1a:58:fb:f4:50:04:23:5c:ae:08:b9:56:00:30:04:36:ff:
99:ca:89:0f:96:38:8a:06:14:ed:08:b2:03:81:7c:d2:0d:19:
84:ea:44:d5:9e:e7:ab:6d:46:d1:4d:1c:d1:8a:f0:88:a6:a2:
e1:2f:83:16:9a:98:bb:5c:f3:fe:7f:e1:44:3d:1f:18:39:3a:
d6:11:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:43 2025 by rpki-client