Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d2dcf71-0209-4006-a427-f221e27d6ed7.roa
File: 5d2dcf71-0209-4006-a427-f221e27d6ed7.roa (raw, json)
Hash identifier: NfeRiYIZE6wRXhnJl9xz0rOx21se2PMRGkgXU+enQm8=
Subject key identifier: 0C:27:DF:0C:28:A7:5E:B3:4C:63:04:95:98:5A:89:2B:A5:D5:8A:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 187DEBA4C2C951C69341C82C6A94010032D0ACC0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d2dcf71-0209-4006-a427-f221e27d6ed7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:c080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7d:eb:a4:c2:c9:51:c6:93:41:c8:2c:6a:94:01:00:32:d0:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1c6f90922ee022f8a86031ac2937ee22137db3fc6f3c19f9c92b4057ea37191a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:90:40:a0:b6:ba:a7:49:c2:de:c2:93:44:
69:d7:04:44:3c:67:f8:20:4f:a4:c4:65:34:25:52:
3e:fe:43:e7:e3:91:1c:37:f5:16:a3:82:ae:a8:12:
39:1b:2b:46:75:31:49:04:d1:f7:a0:b9:21:26:1b:
c0:20:f1:b5:b4:23:2f:4c:e9:04:4c:25:d2:33:40:
96:69:76:3a:54:8f:e6:d3:30:84:e5:19:46:64:77:
3e:4d:31:c3:4c:a6:4c:b0:12:de:de:1a:0f:58:0c:
16:da:f8:9c:43:d7:ba:dc:45:dd:b1:d9:8c:cd:45:
97:b6:25:d7:17:7b:a2:72:d1:04:69:e1:b2:35:8f:
d7:1d:08:11:14:a1:6c:13:fc:50:e7:87:ca:74:bd:
05:9e:37:04:22:3d:53:0a:96:20:23:53:c4:85:16:
ae:01:6f:a0:fd:c1:a5:86:6c:81:9f:6f:d4:a4:0a:
85:c8:79:88:a8:a8:56:68:44:28:0b:8b:df:6d:3a:
b2:4c:4c:fd:71:07:e3:b2:97:45:c0:e7:15:b7:2d:
c1:49:a9:40:eb:99:f5:57:1d:46:78:eb:4f:a8:f5:
e3:72:da:4a:eb:29:c0:b4:5c:40:a5:16:28:76:31:
8d:fb:60:d2:3e:7f:6e:f2:44:7a:76:ef:4c:29:db:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:DF:0C:28:A7:5E:B3:4C:63:04:95:98:5A:89:2B:A5:D5:8A:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d2dcf71-0209-4006-a427-f221e27d6ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:c080::/46
Signature Algorithm: sha256WithRSAEncryption
30:a1:f2:2c:92:5f:d5:b3:17:6a:7d:59:77:f9:9a:92:71:4e:
de:7f:68:ac:a3:b8:79:c6:5f:86:74:aa:74:b8:a6:39:f7:4d:
79:a8:89:14:11:d3:ba:f3:f8:d4:b5:e4:b0:42:bb:fd:a0:b2:
e1:02:aa:21:80:94:c3:98:2f:77:f5:d4:60:30:46:9b:bc:79:
a5:d5:6f:32:82:e1:71:b0:d7:a2:e8:a2:cd:a7:18:42:33:13:
0b:9a:20:08:08:6f:5b:a2:6f:c8:f8:08:49:f6:29:00:02:ce:
fb:2c:a1:77:40:71:65:d6:c8:b6:3f:2b:ec:41:a4:36:5f:24:
92:53:45:f4:1d:14:02:0e:54:ec:08:e1:d0:6f:58:38:44:ad:
e8:e8:8f:78:2d:e8:a5:d5:cb:4d:f6:ef:9e:6b:c7:17:94:b8:
2d:65:4a:6b:05:69:ae:29:61:da:8c:9e:84:20:62:ae:61:95:
7e:11:fd:35:50:70:67:22:d1:70:f0:55:d3:51:52:48:62:c3:
58:63:e6:74:78:f5:29:1e:b1:d5:01:e9:18:41:f4:86:ab:f6:
75:09:10:61:8b:64:be:3c:a6:b7:4a:63:a5:c5:3c:46:47:92:
ce:32:7e:c0:8a:e3:a0:86:31:52:51:dc:6b:c5:6a:f1:44:a4:
fd:73:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:56 2025 by rpki-client