Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
File: 6dd22553-f0bb-4053-b6a2-363adf7209b5.roa (raw, json)
Hash identifier: TZfBlQSQGnVD3oa7ABvjq/TM2Okbakws3U1SshpZGqc=
Subject key identifier: 08:A7:AE:C1:92:5F:2A:B5:04:FA:78:DF:D2:A1:D4:61:03:A4:63:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 495B938B126AA95D524F45016F7DCAEEF4C4BE04
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:93:8b:12:6a:a9:5d:52:4f:45:01:6f:7d:ca:ee:f4:c4:be:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=06b168e452e2945f2fcbc956593956945ab0d2418f64d8072e1079f1bee12c7b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:68:56:58:b2:48:b9:85:3d:e4:5d:57:cb:
7b:5f:51:e2:61:10:62:9b:8e:25:5e:3a:1e:db:d5:
3e:d3:b5:88:21:b4:92:be:52:51:cf:7b:cc:34:78:
c4:2b:42:32:fb:22:fc:3c:80:9e:8b:30:e6:78:88:
6f:ad:41:71:65:41:48:bd:6b:ba:f8:7e:1f:e7:6f:
04:ec:bd:58:75:8e:34:4a:5f:43:be:53:c2:2d:40:
60:3e:75:97:5c:c1:d1:6e:0a:a8:cd:3e:5b:ef:3e:
a4:6a:b0:bf:14:27:81:b2:cb:b0:77:86:bc:e8:5a:
8e:fa:37:01:b4:bb:81:1b:b6:90:88:49:67:1e:07:
6e:60:a6:1b:b5:b5:17:c2:11:cb:82:dc:7d:f5:f1:
d2:3f:16:75:97:67:09:19:6c:08:45:fb:22:9c:05:
0d:4f:58:7a:bc:ea:59:4b:b5:06:52:df:42:5b:3f:
5f:5f:1e:ae:1e:7c:8a:69:8a:e3:cf:a8:0d:08:50:
06:a7:c2:cf:4e:fe:46:b6:83:3b:14:d0:9b:02:07:
7a:1c:f5:a1:44:d3:3a:f6:84:2d:67:66:47:5e:0b:
9f:60:eb:05:d8:0c:1a:b8:cc:d1:a6:8c:f4:c9:04:
c4:ba:c2:b8:a7:cc:f0:5c:74:28:68:70:40:b5:3e:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:AE:C1:92:5F:2A:B5:04:FA:78:DF:D2:A1:D4:61:03:A4:63:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5080::/46
Signature Algorithm: sha256WithRSAEncryption
67:cf:fd:ae:c0:01:d2:69:c5:3b:f0:14:89:af:a1:55:3a:79:
d2:c3:54:4c:cb:af:f9:0e:cf:49:2a:e5:73:56:54:63:b0:47:
1a:8b:24:2c:e1:b0:eb:db:3b:4e:76:d2:cf:12:ec:23:da:42:
4d:8f:06:88:9d:d8:a0:68:74:5a:68:33:73:81:5d:ad:0e:76:
e0:81:8e:8c:d8:ad:71:d1:e4:9e:4c:6d:1a:1a:31:4f:84:87:
5c:d4:70:19:64:ac:63:ed:3e:c6:10:2f:5d:ca:ec:be:bd:6b:
d3:3c:3d:77:1c:04:ad:35:ee:aa:9d:47:8a:68:6c:20:46:16:
dc:18:fb:79:01:3e:98:2a:b0:19:18:0b:48:a0:ce:3b:5a:37:
f0:1d:f4:fe:ca:5a:ba:ee:1e:28:59:ea:80:7e:1f:48:72:24:
89:a8:2f:c0:47:31:b6:57:69:07:2f:64:b3:a9:c9:2c:04:1a:
88:78:ed:2b:b7:78:d9:eb:a2:d1:21:5c:8a:d8:14:44:db:a1:
c1:5a:63:0e:cd:ec:66:6c:c7:62:2f:f6:c4:05:97:6d:f9:ac:
14:41:e5:98:e7:fb:34:d8:20:d6:f4:6f:cc:0d:00:44:14:f4:
95:00:18:36:db:b8:90:6a:6b:ed:46:28:47:eb:08:4b:c6:eb:
85:32:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:31 2025 by rpki-client