Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
File: 70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa (raw, json)
Hash identifier: PNJ9nKjp5OgE1Qvlxw6SW/lBtF8eUvh8veq5VpZH0sc=
Subject key identifier: D2:DF:A6:A7:C4:5D:BE:38:67:CE:F1:83:29:D1:1B:B6:E4:B8:7E:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 257B71A0BF613A2B6ADDD4F89F6499EF6D129354
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7b:71:a0:bf:61:3a:2b:6a:dd:d4:f8:9f:64:99:ef:6d:12:93:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=e5fdb7490a3121ab7d3e3ccbbc9e32dae177a87552521f748e9cdc3aa885ca4a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:04:f6:4d:60:dc:64:7c:ec:f5:b4:f9:00:
17:7e:4e:64:2e:d9:d6:71:be:f5:d8:ea:d1:14:c1:
b9:34:97:ab:92:72:41:0c:c8:f8:72:f7:dc:1c:48:
ea:93:bb:2e:45:03:28:7a:fc:61:c0:ac:fe:d8:0f:
d1:13:65:31:97:59:e3:9f:94:64:99:a5:f3:42:d6:
18:02:fe:d1:e3:39:40:0f:66:c3:0b:71:d6:64:63:
80:0c:23:d2:c8:a5:ec:59:40:a5:d7:b0:b2:15:99:
89:8a:67:7a:fb:35:88:7f:38:92:ed:1d:00:f1:9d:
7c:3d:4b:db:ac:06:32:8e:ab:9d:57:47:52:2e:4f:
ad:72:56:27:97:00:ba:7f:b2:90:d2:bb:50:57:b4:
93:09:f6:62:5c:dc:ba:33:df:0c:77:12:8b:c1:e1:
2e:7c:5e:79:7b:13:18:ec:67:cc:eb:22:c3:f2:d8:
1e:0c:1f:d3:20:25:85:82:88:fe:5a:57:93:94:ec:
33:11:a0:fa:34:1a:85:f0:f7:23:30:0f:07:41:c1:
23:a7:9c:d9:c7:eb:16:a4:c8:e1:85:4e:93:6f:9e:
b4:0a:a5:06:9a:63:06:d0:6e:76:51:cf:6f:19:db:
49:99:e0:1e:6d:ec:ae:56:fa:e1:e5:d4:f8:e9:d0:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:A6:A7:C4:5D:BE:38:67:CE:F1:83:29:D1:1B:B6:E4:B8:7E:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:e000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:3e:21:ee:1e:0f:d2:a2:89:da:98:b1:83:42:74:52:fa:5f:
8e:f1:9f:81:6f:83:2c:0c:05:80:cb:af:5f:3a:11:7a:a1:b5:
91:18:bd:85:bf:87:9a:fe:a1:4a:7e:9a:48:0d:26:96:7e:12:
e9:87:b6:4f:76:dd:21:bc:13:58:f0:47:a4:d8:f5:3d:58:d4:
4f:85:98:28:50:9a:cc:4e:82:7d:bc:6d:3f:29:de:25:cf:6d:
79:35:75:0a:ec:4a:81:4d:0f:4c:5d:b7:e6:31:89:d3:c5:b7:
a4:55:9c:59:40:80:7a:cd:b9:f0:a8:d6:b9:27:8a:5a:58:3b:
9b:27:51:72:21:1b:48:b5:ea:9b:b9:11:ab:7b:a7:0f:cc:d8:
65:be:00:83:21:43:80:be:54:5a:e1:80:b3:df:dd:ec:e8:14:
3a:8f:a5:04:c5:f8:78:67:2b:98:17:96:1f:74:4d:22:ed:5e:
0a:fc:99:68:0d:44:52:25:d7:04:47:58:12:30:95:c3:64:aa:
f1:23:33:c3:19:01:12:1a:66:8e:f0:a9:c3:59:6a:9c:79:1c:
7e:a0:f6:d3:0d:76:18:82:58:2e:f8:1f:e3:a0:1d:3b:b9:d6:
17:ec:86:93:ca:d1:e6:f4:a7:bd:3a:cb:c5:ba:1b:0e:51:e7:
99:06:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:00 2025 by rpki-client