Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
File: 6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa (raw, json)
Hash identifier: pLaltaUmkq24FmOjpsxtnpcF1x0NBsZB61n1nQ2xOhM=
Subject key identifier: 8C:2B:B4:B6:85:51:D3:3A:CE:23:27:3B:16:E3:4B:33:C8:FE:FE:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DC8DAD94B15464079B75F046A530329D6F51BF0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c8:da:d9:4b:15:46:40:79:b7:5f:04:6a:53:03:29:d6:f5:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d1a1e62cce40a489af9e94d0566fbd65c51daabc259a81bf5e34326154d79335, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:85:ba:ac:e0:67:2d:5b:a2:17:96:d4:45:
db:0c:aa:fa:2d:06:3e:ee:bd:3d:92:4e:4f:65:a6:
2f:19:90:d6:2d:d8:1a:29:88:1e:2d:18:0b:70:0c:
5a:f0:5c:ab:a8:65:c0:b8:25:ea:d1:88:50:06:f6:
6c:48:b6:57:69:4b:3c:3a:5d:5a:8d:65:da:3b:bd:
f8:c2:38:41:85:48:b4:ae:7d:7e:bc:23:e1:e6:70:
ce:c2:e1:f7:73:27:25:2b:29:d9:ee:60:18:cf:b4:
cb:87:32:f9:29:42:8d:ba:f4:86:70:f7:f2:71:8e:
09:90:d3:c7:4b:14:56:0e:4e:eb:09:11:61:67:3a:
94:7a:2c:66:79:80:93:90:f7:9e:c5:a9:ca:21:ef:
d2:e5:ad:23:42:42:73:8e:07:9e:a5:ec:f8:9e:13:
ac:4d:e7:14:fc:a1:13:d1:2c:f7:08:67:fb:ef:a3:
49:b4:39:1c:c6:ba:04:19:71:6c:4a:a6:4b:07:16:
d6:55:5f:4a:1b:e9:13:a0:19:eb:34:0b:63:91:8f:
27:07:7c:40:36:2d:9e:e7:56:14:d9:23:1e:fd:b4:
06:f8:76:3b:21:60:82:e3:0e:b7:78:42:1d:fd:db:
dc:e2:0f:d0:ca:8e:58:33:ff:15:9f:04:b8:62:e5:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:B4:B6:85:51:D3:3A:CE:23:27:3B:16:E3:4B:33:C8:FE:FE:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2040::/48
Signature Algorithm: sha256WithRSAEncryption
a6:28:c3:75:42:80:64:92:c0:34:49:85:8f:3e:28:10:7a:96:
64:a8:a5:4b:9e:87:87:0c:43:49:8e:35:99:f2:d2:db:a4:7a:
b8:03:c7:c3:28:44:aa:0e:4e:40:cb:10:c6:07:b8:0a:7d:0a:
b7:46:41:54:42:73:19:85:f6:27:bd:43:89:f3:a6:ef:06:b2:
75:da:a8:7d:e5:2b:81:48:2e:cf:ee:b1:60:6b:f6:f5:ce:1a:
55:86:d7:34:96:ba:03:3d:7b:be:f7:2c:20:71:cc:46:c4:2f:
23:80:5a:f3:e4:d0:6c:20:c0:64:da:1d:32:73:c3:f1:f3:cd:
3c:81:61:f4:83:11:e8:4b:9b:4a:10:1b:25:7e:38:e7:09:bc:
2a:dc:b1:d9:02:2f:e1:76:d6:9a:ca:04:8e:dc:2e:1b:4d:78:
3e:77:7e:fa:d7:4b:d4:0d:01:8b:c7:fc:cc:7a:8e:51:dc:f7:
44:af:6b:57:74:46:4a:6a:63:fc:48:08:ea:b4:bb:a8:8f:24:
1c:1b:dc:26:67:32:c8:ef:16:7b:ec:5b:3a:62:cc:04:aa:1e:
b1:c7:06:4e:95:62:2d:d8:f0:6a:db:33:03:aa:01:31:f0:7a:
14:26:17:2a:46:9e:a9:6e:61:44:f3:b7:f0:2f:d0:a8:18:b3:
2d:d1:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:09 2025 by rpki-client