Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
File: 5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa (raw, json)
Hash identifier: f5ILqH6v0LXpm7iwiG9XZJisraD4iQca8aH9xlJ5oxM=
Subject key identifier: 9B:0D:71:CF:33:60:56:0B:86:06:F6:E1:B5:F2:47:60:7F:BF:AB:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38D4937D42F9DBB260D3DBBA740B42C24A8800AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d4:93:7d:42:f9:db:b2:60:d3:db:ba:74:0b:42:c2:4a:88:00:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6d17fe860e1da9387c28cd24e73d4fc42e7ecbed8f360f55cafdd345a052d6a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:dd:73:c6:a8:63:ba:2c:7e:d5:9b:7d:0c:
01:56:6d:63:63:fa:13:85:10:bb:5d:f9:a3:f9:36:
96:7a:35:b6:98:4e:87:e5:fa:04:72:7f:0e:d5:4c:
1f:c8:fb:35:63:81:e9:fe:c9:84:88:01:6a:6a:f8:
f2:81:a2:06:d6:bf:3b:b0:95:ed:1a:13:0d:f5:7e:
5e:c1:6f:cc:90:f2:02:32:47:dd:ac:0b:56:d7:ad:
6e:9c:bd:39:fe:66:99:3b:dc:be:45:3a:42:35:55:
c0:41:0b:df:4a:5d:51:ff:b8:89:46:bb:32:82:65:
ad:9f:b3:d5:27:d6:99:b2:4d:85:fc:51:ea:cf:63:
f2:a5:8f:bf:d8:50:37:a2:8e:fb:54:d6:75:4f:2d:
9f:01:6b:b1:f8:29:83:0c:57:a0:28:6c:73:02:97:
ff:10:47:3f:25:3e:e6:1f:58:99:03:b7:cd:97:47:
12:95:92:9b:c5:fc:ae:9a:2d:4d:ae:be:18:b2:92:
af:dc:0c:d2:0c:f6:60:67:79:28:58:b2:28:e5:f0:
f1:30:48:99:d3:a9:66:28:03:60:58:01:0c:63:d6:
c9:38:b9:bb:a7:45:2a:6c:62:b9:7c:00:27:8e:5e:
63:ff:17:8e:11:48:d5:0d:bd:14:47:c2:c9:d5:45:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:71:CF:33:60:56:0B:86:06:F6:E1:B5:F2:47:60:7F:BF:AB:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:10:c5:3f:7e:49:24:87:dd:47:3b:7b:8f:5b:36:a0:28:3b:
79:67:04:7f:76:ee:8d:16:27:96:d5:48:8a:7d:e4:ed:5c:4a:
2c:31:ce:4e:08:15:90:f5:a0:03:ba:eb:6e:d5:ef:1d:27:03:
f6:56:b1:ae:ee:3c:dd:5b:92:95:cc:6c:82:a4:12:ee:b1:3c:
b9:6e:91:1d:ed:e7:c8:a7:4f:67:7d:a3:b4:db:56:9d:21:a3:
7d:e5:59:54:ab:13:0b:0f:56:dd:ee:44:dd:19:d8:5d:c2:5f:
3d:91:0a:1b:12:90:02:d1:f7:fd:47:33:09:61:7f:e3:4a:4c:
4b:3c:55:2b:84:cd:5b:81:6c:15:fa:b8:69:99:f5:65:07:6a:
5f:75:61:ed:93:92:12:72:cc:2b:8e:95:f8:e0:58:96:19:eb:
d7:06:19:5d:3e:bf:a6:db:d6:bf:cd:3f:53:ab:c6:16:d2:db:
1f:d1:82:71:92:20:6c:cd:e4:2c:0e:27:20:40:2a:4d:7c:71:
61:54:cd:0a:1e:a4:4b:16:29:26:91:ea:5a:5b:b3:bf:78:a8:
ad:55:f0:ee:58:a1:4d:16:19:43:74:88:b7:ec:29:c0:2e:dc:
1c:77:20:56:78:b4:5e:ec:de:93:e3:0b:c7:22:5d:a6:9c:42:
2d:1a:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:19:52 2025 by rpki-client