Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
File: 68ece0e7-075e-4bcd-873e-0c74882a8546.roa (raw, json)
Hash identifier: fVznf4oWt1BD3hwCkMKOPLB41RDXsgS+HTiG+fXL8uA=
Subject key identifier: 0F:D1:84:37:7C:E5:CD:16:81:B5:48:B8:19:0C:6F:1B:C0:93:F0:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74610CAB0D4297FB9E7728A8E0534B47C951178C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:61:0c:ab:0d:42:97:fb:9e:77:28:a8:e0:53:4b:47:c9:51:17:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5ba714d128534718c11082025222f2fa2208a4c091708564c89c2c9b249190c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:a2:68:21:44:dd:5c:9c:97:f1:73:15:ed:
4b:b6:8c:30:f7:57:00:a0:64:f0:27:b6:98:d1:37:
47:bb:96:a1:0c:da:61:ca:73:a6:56:cb:33:b6:c6:
d8:fb:72:da:bd:27:eb:e2:4a:b9:aa:c5:99:b9:a4:
83:37:9b:bd:d7:20:84:dc:0b:90:a5:98:f6:5a:a3:
de:b9:36:7a:7b:16:0a:c3:bd:cd:e1:82:3c:11:d4:
d5:5d:43:23:9a:49:38:d1:06:fd:4d:c1:9c:8c:79:
3a:9e:fa:20:1b:0b:eb:e9:42:56:29:dc:b8:18:33:
c5:0a:7c:a9:c1:0c:00:42:71:62:53:52:06:03:b4:
cd:a4:0e:ae:c0:ee:ce:8d:10:6a:93:79:22:9e:be:
62:b6:be:1b:34:1d:d0:60:41:46:2e:c0:ab:cc:37:
23:b2:2e:e5:0a:f5:6c:13:f6:b3:69:27:29:46:2d:
af:7a:a5:9a:28:57:52:9d:37:1f:06:4d:c6:3f:7f:
1b:0d:74:fb:0d:13:82:1f:26:04:ef:e1:0f:98:84:
8a:54:4a:16:7a:51:6a:e9:7d:0e:fa:88:70:bc:6a:
76:58:f8:bb:47:90:9d:52:70:62:06:93:18:54:e3:
c1:76:53:9e:6f:37:b9:dd:72:06:91:75:5f:f4:a0:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:84:37:7C:E5:CD:16:81:B5:48:B8:19:0C:6F:1B:C0:93:F0:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8080::/48
Signature Algorithm: sha256WithRSAEncryption
a9:56:cc:d6:cd:cb:93:4d:0d:32:15:f9:c9:10:4f:1c:f8:c9:
92:09:6f:1b:dd:f2:ad:7d:15:0d:98:7e:f1:b7:8f:a6:79:eb:
31:3b:6c:70:39:2c:03:d4:63:ab:76:e4:cf:d9:3d:64:87:22:
d2:f7:81:72:31:3f:14:bd:39:99:a0:eb:de:68:c1:74:33:3c:
95:23:d1:c5:76:3d:b4:41:d3:ab:ae:f9:a3:22:51:c7:43:ed:
e6:64:f3:3f:a9:26:d6:ae:81:95:51:1c:15:c1:cd:4f:eb:e2:
aa:9d:5d:9b:b3:16:65:13:45:ac:a1:6b:0f:cb:14:84:30:fc:
59:ea:64:80:1b:95:2e:0c:9c:3a:8e:5f:65:af:23:3d:c4:27:
38:a2:de:0c:f1:5c:f6:49:13:c3:41:f4:5b:e5:f4:4d:d2:10:
ba:11:3e:d3:71:d6:2b:29:f6:e8:0e:c6:ee:7a:db:66:8b:03:
7e:8e:f2:09:4a:ea:28:b5:0e:2e:10:31:3a:7d:4f:e5:8f:9a:
85:00:6f:70:7d:2a:3c:3d:44:09:24:6e:f1:4f:1d:f8:6a:30:
54:ce:27:06:f0:5b:e9:5a:fb:5e:f5:4b:7d:bb:ef:2b:4a:f7:
a7:0c:c9:df:22:be:03:d5:4e:e5:1c:c1:d8:c4:7d:5c:78:da:
d8:18:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:54 2025 by rpki-client