Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
File: 6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa (raw, json)
Hash identifier: UmlYyfmtswP8CvUnxCbzzrN0wfFMgofkQsbxV09qQHo=
Subject key identifier: 41:FB:4D:61:92:AA:D2:BF:DD:78:77:A3:42:51:BB:93:84:FC:27:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A10EEB14DE50E5CB0B6F703BD7D2AD11B288C05
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:10:ee:b1:4d:e5:0e:5c:b0:b6:f7:03:bd:7d:2a:d1:1b:28:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=ab365b59a34c066b7b3c4b2cd35d25b9853ce1da91ff35e049ca7960134aed05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:d3:22:11:ff:ac:57:d3:5c:31:e8:93:71:
4d:ac:48:ac:0f:11:ec:72:30:87:f6:fa:f5:84:e7:
1c:7d:4b:d0:a5:7a:41:7c:d6:f3:8d:94:bf:2c:f2:
d5:ee:1d:34:37:70:e1:a9:6f:41:fd:1c:4c:48:a6:
a7:72:92:19:ca:69:2c:bd:30:24:16:69:05:0e:28:
b2:35:78:95:f1:91:7f:2e:cf:4e:e6:b4:11:18:3d:
0c:78:9b:5c:87:2d:77:ac:0b:aa:a8:a8:34:5c:c5:
e9:2f:31:69:06:f9:99:01:2d:d2:a4:c0:ae:06:75:
2e:b8:84:91:c7:1d:2e:5e:04:32:1d:8e:d1:1b:37:
75:df:c1:47:8a:b3:9b:fc:32:74:e5:fe:bc:8b:cd:
6f:90:ed:00:c4:29:ad:0a:40:89:e6:81:75:03:18:
3a:70:fb:48:a5:66:29:67:36:b4:04:28:31:19:27:
a3:6d:ff:0d:ef:34:47:a7:31:4c:9d:bb:17:80:aa:
dd:61:66:8e:0a:68:11:7b:dc:38:09:0f:c3:57:ae:
5b:78:3f:19:4b:3f:df:17:63:97:f3:9a:c6:0b:7a:
68:0e:4e:a9:1e:93:f7:fb:78:a0:15:ba:88:58:19:
3e:8b:6c:31:7d:cf:f9:6c:ca:37:75:bf:3e:0e:b0:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:4D:61:92:AA:D2:BF:DD:78:77:A3:42:51:BB:93:84:FC:27:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:c000::/40
Signature Algorithm: sha256WithRSAEncryption
03:b7:04:01:89:e5:fe:fc:9f:e3:cf:94:2f:df:87:c7:de:bd:
52:60:8e:41:4c:39:d4:f9:2e:51:03:a1:7c:61:2d:47:95:a1:
00:c0:7c:cb:38:29:e8:8f:09:e7:c0:60:f0:8c:39:f4:51:49:
b8:89:93:c9:71:9d:11:7f:1f:b4:13:a9:36:ad:d2:f2:d3:0c:
09:4d:4c:b1:73:d5:35:ec:c1:bc:97:3d:ac:a6:ee:d2:50:da:
57:88:ba:14:00:73:d2:eb:26:20:25:3a:fa:ce:e8:dd:0a:0e:
91:4e:ef:d6:4c:4d:ed:6d:87:da:ca:64:3e:42:4a:28:9f:e9:
6e:13:00:26:c5:b5:cc:c0:6f:3f:84:39:a1:35:80:27:be:07:
64:9c:32:2c:ea:42:6e:34:a2:bf:dc:32:84:55:fc:ad:41:ab:
d4:e6:d9:85:61:13:1e:6a:bc:79:bd:8e:fa:22:41:11:8f:8b:
79:83:0e:9d:38:bf:a0:7d:50:24:f4:28:2c:bc:7b:4e:01:47:
6b:32:c8:a8:87:eb:11:3a:88:66:c6:5a:87:fc:a1:97:45:44:
03:8d:09:44:a4:96:d5:72:2c:69:58:0b:fd:01:25:fd:bc:fb:
8d:35:a3:7a:42:fd:ee:fe:27:91:95:83:ba:66:3a:06:4f:20:
80:93:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:06 2025 by rpki-client