Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6936ff87-0eb4-4868-8709-cc4e2f7458d3.roa
File: 6936ff87-0eb4-4868-8709-cc4e2f7458d3.roa (raw, json)
Hash identifier: IYvWgXL0+C81QBFikJk2dcnK49B8BTpmUKeRrhjhrN8=
Subject key identifier: 64:FE:40:21:F2:98:48:0F:C2:CE:40:75:B4:5A:57:91:DF:A8:03:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F2215306F9E471B76E0D0B2B3F639BDE36CF1E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6936ff87-0eb4-4868-8709-cc4e2f7458d3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:22:15:30:6f:9e:47:1b:76:e0:d0:b2:b3:f6:39:bd:e3:6c:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=559cb8cec27bcd665455f9e28d1feabe0ab08e98a76d9c83ede1c8cd203ae9d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:0d:5c:76:7b:8f:b0:31:7c:e1:d2:24:24:
9b:8f:99:70:a0:60:c3:f2:30:32:7e:55:25:59:e3:
c3:69:e7:03:12:fc:c0:94:41:6e:a0:54:d8:d1:a8:
75:b3:81:5c:16:5e:36:a9:7e:5b:98:f0:00:4f:6c:
19:65:11:35:33:58:ab:6f:bc:23:ff:95:ad:bb:33:
a0:e4:e0:67:6a:43:42:6d:4c:c3:b9:be:28:b3:a6:
a0:59:71:7a:18:c9:cb:2a:1e:3a:3d:5f:3e:98:5a:
5b:9f:97:b8:f2:67:0b:9a:ee:b9:db:73:e1:1d:3d:
58:ec:5c:64:18:34:41:71:c8:5a:b3:af:18:88:f0:
ef:5a:75:65:35:33:13:c3:28:52:21:b7:d0:a5:03:
4e:09:a6:88:de:5d:12:a6:5e:69:1f:31:63:56:c0:
06:29:23:90:18:b4:9f:6b:7a:af:7b:a8:c8:5b:03:
c8:30:31:57:84:14:1e:39:08:a7:47:23:2e:d8:25:
2b:e8:21:32:91:e9:c8:aa:bd:c2:ec:04:13:8c:b0:
dd:4b:24:46:6d:ba:9c:03:2b:fd:ff:2f:0c:52:db:
c8:c1:15:be:15:97:b2:e4:e3:58:18:23:da:58:c6:
1b:99:8d:ef:a5:b3:7f:ed:91:5f:c9:44:f1:6d:b7:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:40:21:F2:98:48:0F:C2:CE:40:75:B4:5A:57:91:DF:A8:03:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6936ff87-0eb4-4868-8709-cc4e2f7458d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:b000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:7e:6a:74:ca:ca:f5:dd:2e:16:04:8a:e4:95:ba:1c:f4:bd:
5c:31:be:ae:86:3d:81:eb:31:02:6e:12:01:99:5c:fe:bc:6e:
36:0d:d7:0e:f0:bd:93:e4:30:9c:cb:63:e0:44:d2:52:84:0a:
4e:7c:8c:f2:9b:66:25:6c:df:52:f1:fd:57:b0:2d:9c:b7:af:
be:05:51:5e:90:db:b4:c7:1d:7b:87:5e:d1:ca:d7:2a:d9:91:
5b:23:9b:c0:32:40:53:d5:98:6e:09:f8:1c:a4:a8:dc:02:78:
8c:d1:b8:d1:ac:42:12:04:4e:df:ea:c9:18:bf:99:18:a5:6c:
5d:b9:f7:14:9a:fd:d0:1e:0a:51:fa:fa:4a:de:55:ca:74:f9:
31:dd:0c:81:6c:c2:ae:e7:5c:a7:72:ad:ee:46:3a:42:9d:41:
0c:94:ba:25:7c:0b:99:f3:45:89:0e:eb:bc:19:74:28:fc:8d:
e2:9b:58:32:4f:d5:a1:09:cb:e3:1d:ec:81:d9:ec:c8:20:f4:
5b:31:0c:19:c7:de:47:ce:5c:34:84:46:4d:6b:ec:b9:36:56:
2e:bf:3c:6f:99:be:3d:3d:f3:ad:02:76:29:24:dc:cd:db:3b:
c7:67:48:05:54:33:db:96:42:c2:30:eb:5d:1f:0f:df:57:8a:
92:c7:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:00:05 2025 by rpki-client