Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
File: 7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa (raw, json)
Hash identifier: qdOUGvVI55BlhhA7g04oz1WTv1zTBsPA9075RIpQJEA=
Subject key identifier: 5B:52:13:F5:DA:D3:52:ED:E0:C6:A7:E5:45:F6:57:AC:1A:36:72:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 782C1CD60B76D3A9FAD729338035A974004790B0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2c:1c:d6:0b:76:d3:a9:fa:d7:29:33:80:35:a9:74:00:47:90:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5ee309c2dc9c83a0f26b8a537c20b76674ca9b6f9e43dfd119c00bdd60e84193, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:53:39:e6:fc:b8:1b:81:35:c1:10:ac:ec:
2c:5e:b9:35:a3:a5:17:cb:f4:40:b3:e1:4d:c6:fd:
59:3a:50:50:9e:3b:29:ae:4c:0a:ab:0a:cc:72:10:
e9:f2:d9:59:0c:bb:be:88:a2:fe:f3:d3:11:1b:d1:
8d:6b:b3:47:7a:76:25:84:7a:32:0d:fa:0a:9b:80:
45:04:83:ed:0d:d4:a4:e4:df:7d:eb:0d:5a:d7:38:
71:9b:88:9b:c8:a4:ce:08:a1:75:09:94:f5:e3:55:
09:3e:39:4e:a6:9c:08:7b:8f:c6:16:c0:3d:56:d4:
f1:c8:d2:1e:ec:ca:5d:70:a9:45:6a:39:9f:aa:26:
8f:72:7e:ee:8c:44:f4:b8:55:25:e7:3e:57:6a:81:
ec:8b:e2:7e:d4:14:22:8d:bc:10:f4:f1:88:8f:c2:
56:fb:8a:82:79:e2:eb:26:e2:27:a3:59:ee:1f:27:
64:bd:22:52:00:12:7d:76:37:68:9f:be:e5:3b:05:
3a:3f:4b:fe:68:69:c6:d0:d1:da:27:78:29:82:a4:
55:7b:77:e7:c3:db:e5:a2:49:ba:56:80:5c:c0:a7:
97:c1:41:c0:ea:5a:91:5a:dc:a7:bc:a1:36:36:d7:
59:57:f9:5d:8e:e6:5d:7c:f1:19:c5:17:e8:e7:95:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:13:F5:DA:D3:52:ED:E0:C6:A7:E5:45:F6:57:AC:1A:36:72:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010::/28
Signature Algorithm: sha256WithRSAEncryption
7d:01:17:f2:51:64:d6:e8:73:35:2d:f1:87:6e:85:c9:2f:75:
2e:36:71:3d:68:76:a0:02:d0:21:72:b2:2c:11:a0:d9:f3:e6:
c2:45:ff:49:f4:e5:a2:58:ed:01:3a:6c:81:93:38:aa:ad:d8:
d4:e3:ab:1e:13:73:4b:42:ff:99:5f:6a:38:0f:e6:87:7f:ab:
e9:cb:f9:49:54:f0:72:24:64:d1:39:90:24:2d:b7:c3:fd:64:
e0:66:f2:45:a4:51:42:a9:99:e3:f6:56:c8:d6:30:f0:e5:56:
cc:dd:6a:a1:91:7d:58:fc:c0:78:7c:18:3d:ce:af:72:87:29:
cc:9d:62:6c:57:97:38:73:0e:e8:49:b9:f8:94:18:2d:74:3f:
c9:a8:98:0a:78:dd:4d:7a:58:c4:36:fd:78:bc:e4:10:d1:bc:
a1:76:a6:19:01:3d:0a:08:9c:37:fe:7d:bb:28:fc:a2:ed:6b:
41:2e:08:59:a7:d2:0f:3d:9b:2b:94:f5:ef:2a:c8:96:77:e0:
83:36:99:19:12:25:46:87:c5:3f:8a:e8:b2:bd:f7:26:35:2d:
46:6f:f8:f1:e9:80:2d:79:dd:3a:47:3e:ab:76:37:c7:2c:50:
68:d4:f1:95:04:90:9c:40:7a:99:fc:6a:50:5f:4d:e1:de:74:
2b:48:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:05 2025 by rpki-client