Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
File: 6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa (raw, json)
Hash identifier: +ADPcpqzVDf+sXoVjDs57n7zxQqKtfvX3vOehT0DRb4=
Subject key identifier: A2:77:B2:5B:DB:F0:C3:C0:73:78:92:8F:28:96:A0:66:08:19:74:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45D083D3A937AE3CE763B537F2A00134DF09E98F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d0:83:d3:a9:37:ae:3c:e7:63:b5:37:f2:a0:01:34:df:09:e9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=82c4bbb9ea553a5c595e45d9d3bb2a867d39f7f8cd782d410e8cb137eca1df98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:d0:4a:4a:91:4e:48:a7:30:d5:1d:0f:ab:
b8:da:95:f5:fe:b0:17:8f:69:39:3c:82:cc:e0:fd:
f3:be:cf:a9:d4:7a:bb:e4:46:c3:5a:a3:8b:43:87:
bb:d7:9d:ff:c4:e1:21:f7:2d:41:c5:7c:92:3d:c9:
45:8c:6d:d0:04:ff:68:f1:dd:6a:70:53:dd:be:6f:
27:1e:d0:b5:3b:8f:0a:6f:ab:93:19:e7:9d:84:6b:
d6:bf:1f:d8:48:0d:9c:65:ef:cc:7a:7b:1e:3f:1e:
19:a5:23:72:7c:18:d1:29:75:fe:b8:de:f8:98:9f:
39:8a:46:05:0f:21:a0:0b:d9:77:59:7e:10:f5:77:
a3:1d:8f:53:05:b0:e5:a8:e8:2a:af:04:e0:7e:db:
f2:f1:51:6f:8c:7d:75:e8:87:3a:73:5f:2f:73:da:
d0:c7:3f:ce:c1:a5:b7:40:25:fd:79:40:5c:d0:02:
5d:10:66:d7:c4:93:38:e1:a0:5c:5f:18:5b:2a:0b:
40:b7:3e:1c:ab:6c:d1:97:f1:40:73:02:40:3e:a2:
85:dd:6a:89:4d:12:51:59:f1:43:07:a4:6f:c3:0d:
c6:89:92:cd:6f:d5:10:5b:64:c9:10:ad:47:17:03:
8e:f5:32:77:25:ca:f4:6c:cc:8d:e3:11:d2:78:16:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:B2:5B:DB:F0:C3:C0:73:78:92:8F:28:96:A0:66:08:19:74:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
80:1c:db:79:aa:9b:d8:bc:46:ef:ce:de:33:10:6b:c7:9d:f7:
0d:91:ae:2c:79:2d:c1:29:8f:ff:58:24:34:ab:8d:b8:35:44:
67:59:3a:af:4f:c3:f2:3d:47:47:6c:8b:c6:60:ae:2a:5b:5c:
c2:9d:8d:20:e2:e7:52:19:91:ff:af:43:09:7c:68:e0:c0:ef:
4b:3a:96:e5:b3:b9:a4:28:58:0b:75:c7:2c:ab:61:b6:25:25:
3f:54:16:eb:3c:bf:20:c0:34:be:65:43:a0:f2:ac:2b:44:9d:
98:32:51:0a:0f:63:87:f6:a0:cc:e0:4b:fb:1f:d3:3d:ae:31:
01:16:b9:1d:ad:dc:50:e1:21:69:2f:28:90:1f:ce:cc:63:44:
c5:65:4c:21:0d:7f:e9:76:f2:dd:89:f2:43:40:40:ef:79:a2:
e5:29:7b:cb:ad:1d:a5:df:c9:fd:2e:7a:b2:b6:26:d7:08:39:
78:0e:ee:81:d6:f1:0d:7a:0f:92:f3:1d:cb:04:ae:3c:9a:8b:
ee:25:e3:bf:a2:e3:08:b3:69:f6:dd:80:91:71:26:75:2e:54:
e8:65:9a:73:c7:a5:30:3d:25:e5:d5:8d:06:f4:30:09:f3:16:
7c:36:b4:c4:0c:a0:0e:9b:f6:24:68:e1:cb:b2:4a:dc:15:e8:
87:39:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:51 2025 by rpki-client