Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
File: 7116ef93-bff5-462e-a725-ae90147ffd39.roa (raw, json)
Hash identifier: FAp/ZWwHZo4h17WTvbLunRQNG+9m7X7RV1L4ow0H6rI=
Subject key identifier: BB:88:B5:DF:ED:E3:FF:C2:82:D9:30:72:02:43:A0:D8:44:35:CB:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A8A136F239CB7059FB18E35DC517266195B9383
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8a:13:6f:23:9c:b7:05:9f:b1:8e:35:dc:51:72:66:19:5b:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=109f3617428acd04ba4a415a4d0abc59828de5db715742ff7349c84c12983f0b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:3d:87:3f:88:c6:8f:0b:83:39:fe:c2:37:
79:9a:a1:50:32:19:70:63:b8:61:c3:27:44:7b:15:
73:48:7b:c4:d1:38:0d:e7:5a:ac:d8:85:14:6a:01:
49:20:c5:16:8c:b4:a2:b7:d5:bf:c4:fc:1c:a0:bc:
d2:47:b5:82:69:0c:8d:b8:26:89:ef:f9:49:cf:04:
3f:50:36:f2:1f:52:13:fd:ac:5b:b4:a8:41:40:0e:
c5:b4:b3:cf:d4:17:5e:ff:99:86:85:f3:6a:4b:63:
ef:94:26:76:03:f3:1a:2b:ca:0d:a2:ed:18:ae:c9:
8b:d8:1e:b7:49:68:49:23:c6:f3:db:71:72:42:db:
06:68:9d:40:8d:6e:e0:d2:07:31:69:9e:60:cd:c7:
68:44:72:6f:1e:d0:5e:b0:8e:16:6f:fa:a2:4e:ab:
55:fb:51:00:3d:88:42:b8:e8:56:19:b8:c7:0e:e6:
2f:b1:b4:48:28:56:31:dd:84:00:5f:79:1f:38:4b:
ef:9b:db:2c:f4:a4:f5:2d:d2:5c:5b:f3:74:17:af:
67:04:9c:82:ce:6b:7f:81:bf:12:ee:fa:c4:ff:4a:
0c:aa:aa:30:19:35:e1:a3:09:56:58:44:1c:31:47:
2a:79:de:b1:03:19:e5:56:af:ef:31:04:95:6f:24:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:B5:DF:ED:E3:FF:C2:82:D9:30:72:02:43:A0:D8:44:35:CB:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
35:22:37:19:58:76:86:c0:06:dc:e5:ae:68:1d:a8:49:80:00:
4f:34:d5:b6:60:f6:9d:d3:8e:95:02:30:56:91:e2:bc:4b:9e:
2e:27:25:16:2a:9e:6e:85:9c:dd:c1:69:b6:37:dd:b6:54:30:
ee:e6:4e:0b:4e:bd:49:a8:12:2c:14:af:26:30:e6:26:ac:97:
f7:78:13:86:63:27:fc:da:22:03:ed:39:65:97:f7:79:12:a3:
7e:04:98:54:2d:39:aa:90:6e:cc:a1:08:46:f7:dc:34:4f:a8:
44:7f:e1:6c:95:50:2a:52:28:d3:d1:5f:1b:a7:84:70:8d:46:
3d:a1:8d:56:e7:47:06:b1:5e:09:53:27:03:0e:0e:13:a0:bb:
24:41:c7:b5:39:7c:84:63:a4:21:fd:4d:90:07:6c:e1:d8:ac:
85:de:0a:fd:6f:e1:4c:e3:90:be:72:0f:38:7f:5e:0b:68:75:
af:e5:2b:8f:2d:9c:86:26:6c:2c:ef:ca:44:a2:df:2a:c6:f5:
5b:4e:b7:54:72:6e:2e:7c:f2:2b:3c:41:78:59:ab:9b:9c:66:
57:72:5d:9a:37:be:52:34:95:d9:ca:d3:9c:d1:e5:73:6a:19:
ff:b0:4e:f1:bb:2b:eb:b5:48:ef:10:77:5c:3d:c6:35:4c:87:
a0:7b:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:07 2025 by rpki-client