Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
File: 6bd3f603-c189-489c-bdf5-631b47b2cd39.roa (raw, json)
Hash identifier: wos8kQGBwbmu2XUYWnsG1jUjJdQgNoiOkpJAdu6MBXo=
Subject key identifier: D2:30:8A:E8:11:F8:9F:E0:B3:B3:8F:05:E9:9C:54:31:88:26:0D:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23463912582A931B9F00AC4CE87E5BE5217FB625
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:80c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:46:39:12:58:2a:93:1b:9f:00:ac:4c:e8:7e:5b:e5:21:7f:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a4338641e1c21e4b239a5a8bd5c7dec47265585fb440962ef3ca49cb0202df4c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:5d:3a:c6:74:d4:f8:f3:5d:81:c6:ae:e8:
c6:5f:10:0a:a8:79:47:b3:59:d7:ca:b4:66:2b:db:
f3:bd:9f:7f:9b:92:66:43:8a:85:0f:4f:e6:0d:c2:
85:a6:fe:d3:60:02:3f:34:1e:ec:bf:82:13:91:98:
c4:05:82:b9:b1:88:6a:d7:bb:85:82:4b:fc:55:d0:
0f:df:19:35:2f:3f:1e:1d:25:23:5c:7a:f0:81:2c:
d6:a3:d3:cf:b9:41:38:6c:92:b0:9f:a2:fc:30:cd:
c5:cd:f1:d3:86:20:f1:dc:93:4d:36:c0:cb:2d:75:
88:3e:f4:4b:f9:05:83:b3:78:e1:70:3a:74:8f:f1:
bb:1d:b8:bd:51:2a:67:34:cb:80:87:28:95:d2:e3:
4b:c9:5f:c6:18:55:eb:5f:40:3d:80:76:68:f9:67:
c5:eb:71:3f:78:0d:ec:5c:18:98:e5:e8:83:c4:bc:
19:68:73:1b:85:7e:61:78:4c:13:e6:35:98:39:42:
31:7d:68:72:0c:51:8f:71:96:a7:fe:5b:4b:c7:d1:
90:3c:ce:98:4a:e5:51:35:ce:70:ee:28:1c:ea:46:
d6:19:ac:6c:96:4c:e6:fa:58:b0:08:8a:2f:37:8e:
fd:f7:3d:e1:c9:72:8f:68:a2:6a:e1:2b:cc:6f:e7:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:8A:E8:11:F8:9F:E0:B3:B3:8F:05:E9:9C:54:31:88:26:0D:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
95:a1:ce:23:26:2b:24:3f:f3:35:00:2a:65:12:8d:71:90:61:
83:b8:18:f4:b1:f5:cc:57:5c:75:78:eb:b8:0d:85:7a:8a:7b:
81:af:78:f1:33:03:71:b0:06:63:f9:4f:66:b3:8e:1c:8e:55:
86:b0:02:d2:06:37:42:d2:06:93:dc:eb:a9:2d:58:a7:d1:f2:
ba:b5:1c:56:77:a7:f9:10:b8:9b:fa:a9:67:db:e1:42:cb:5e:
cf:3f:1a:9e:1b:59:a5:a9:bc:23:26:d9:db:69:45:e3:24:81:
3b:d4:b6:6c:a9:8e:b7:ee:29:43:de:1e:d8:d3:65:37:3b:84:
03:18:e6:2a:67:6e:7c:d3:05:6c:01:57:e7:dd:2b:35:67:0c:
b1:35:b9:7a:58:27:16:5a:ba:ac:3d:ac:1d:b7:b5:80:2e:44:
06:4f:06:16:49:5d:d8:e1:84:ec:d4:60:a6:fd:38:a2:bf:b9:
3c:39:ab:92:19:87:29:49:cf:4a:da:07:52:b8:fc:69:76:78:
b7:4f:29:60:78:6d:2a:19:16:69:ec:99:6d:01:c5:9d:a1:f2:
2f:35:1d:c5:76:85:42:62:8d:60:00:ac:0b:75:d7:ff:77:e4:
55:92:e6:f8:9f:4e:4e:cd:d0:7c:cb:2a:e6:2d:e5:cc:e7:68:
14:e0:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:29 2025 by rpki-client