Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
File: 60c499a8-e470-4a76-9095-20d8554a426a.roa (raw, json)
Hash identifier: +yTVtiMq21gtbq5SHzj0BctUbLBcGHCFAWEPL4IpnUw=
Subject key identifier: 26:C5:50:36:A9:EB:4B:37:DF:33:4B:EF:5B:FE:8B:7D:76:D6:33:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31D569CFAE4688910DC3B942DCA8B82978930641
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d5:69:cf:ae:46:88:91:0d:c3:b9:42:dc:a8:b8:29:78:93:06:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=761791cec900107b33ba9ab9f7114eb75a344f5500ee8d94006e9a5cbdec6499, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:e1:80:b6:4f:c8:c0:2e:75:43:1e:c9:e3:
26:0c:54:9a:d0:f8:d7:b1:3d:51:a4:05:0b:a5:2c:
97:f7:4d:41:11:ef:9f:97:da:06:e1:35:91:ed:71:
16:57:91:dd:10:49:16:c1:a4:54:d7:f5:dd:40:06:
fd:b2:ac:30:19:a6:8f:83:33:8b:eb:8d:28:61:ac:
2b:46:08:0d:16:65:9b:92:35:f7:f5:bf:6c:04:c7:
b8:1b:d3:cd:6f:12:42:0f:fb:72:38:9d:29:5f:1d:
64:48:46:c3:d9:71:d2:e4:0a:f3:3d:86:ca:0c:eb:
38:ff:33:86:f5:9e:ce:6a:62:2f:8d:14:d0:6b:c8:
08:b0:b1:56:1e:9c:11:7c:62:c2:c3:61:cb:80:a4:
9c:32:11:f7:d3:0f:e7:14:f8:a7:e9:a5:05:74:ea:
1f:2c:43:d0:51:49:c8:68:23:c5:b9:92:1b:b1:58:
a8:1f:81:e8:61:e1:60:2e:c0:82:aa:d5:e5:6e:7e:
24:1f:dc:f9:fa:43:bc:62:d2:dc:d5:29:a6:3a:13:
d4:5a:0a:0d:a4:33:6a:94:19:bd:d9:84:ea:32:f6:
33:fc:8e:be:ef:c9:a1:19:7b:20:b4:60:d3:b3:d8:
b7:2c:f7:92:7f:a3:d2:eb:0c:56:37:69:02:9b:fe:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:50:36:A9:EB:4B:37:DF:33:4B:EF:5B:FE:8B:7D:76:D6:33:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:c00::/38
Signature Algorithm: sha256WithRSAEncryption
92:83:75:b0:c8:e4:d6:ce:26:02:f5:71:ee:c1:d1:4e:ec:9b:
26:da:6d:7d:15:3c:0d:ec:d5:42:9e:43:b9:c4:d5:cc:a1:bc:
39:90:a8:e2:75:9e:bb:c7:d7:6b:4b:62:8d:7c:64:c4:55:f1:
90:de:76:62:27:76:b6:5f:d1:06:47:76:ed:96:56:b8:4c:6d:
6f:f0:e6:74:bb:c8:4c:c8:09:fa:36:2a:cc:ce:9f:0a:c3:ac:
cb:63:7d:62:14:8a:76:7d:2e:cb:0d:29:ad:42:c0:02:90:32:
d4:ac:22:63:fb:17:d3:4f:0c:ea:0f:11:47:fd:72:82:ca:7d:
d9:b2:f8:4f:31:14:64:16:17:bf:00:f0:9f:b8:03:b7:68:37:
ec:f2:43:d6:a4:cb:90:3d:ce:4d:81:1c:37:2e:23:20:61:bf:
68:58:d6:2b:70:ac:ba:ac:d5:bd:39:0c:14:68:78:9e:10:bf:
fd:3a:07:49:4a:3f:b1:45:b9:3e:44:0d:ea:ff:c5:e8:9d:75:
22:cd:34:2e:f3:e1:35:91:64:44:f4:e3:c3:90:04:bb:e8:e7:
72:e1:77:1d:77:bf:39:17:24:a7:d5:70:82:40:68:84:94:47:
23:85:0e:92:82:ae:dd:72:15:25:c5:ea:9f:02:54:c2:0f:35:
f4:aa:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:16 2025 by rpki-client