Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
File: 739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa (raw, json)
Hash identifier: vMnfM3qIas99X8Q3sAGWn63dRmC0IbwovrkHwVjD+TY=
Subject key identifier: 3E:A9:03:A7:20:E9:E8:03:DD:F2:E4:5F:1D:C7:A8:E7:5C:C0:80:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14DD4DA2D3AE06E2DE83A493B6EB33565174151B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:dd:4d:a2:d3:ae:06:e2:de:83:a4:93:b6:eb:33:56:51:74:15:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=45db3432e6431444852f95e674ab25dfeab4f0f29e7723493e07c61aff9a2848, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:39:85:da:a3:b1:f0:76:20:06:e5:97:ac:
16:22:42:d4:12:0e:5d:45:c9:02:16:54:93:66:99:
d3:b3:4f:a5:2e:d9:9c:b4:90:27:ef:6f:9f:42:e2:
fc:00:e6:d1:12:ce:9b:ba:92:0a:69:12:55:7f:cd:
13:9b:55:ad:e2:4f:7a:05:b0:94:63:bc:ec:8a:0a:
f7:21:21:79:0b:19:63:34:3b:27:17:43:ea:97:f3:
55:7c:59:9d:68:8c:4e:de:99:34:6a:10:b2:d6:e4:
40:a7:c5:de:86:3e:d3:f1:3e:df:55:d8:43:85:0b:
46:89:65:c1:88:1d:25:11:7b:b6:56:89:0f:cb:54:
ce:c2:a8:ed:63:51:2a:fb:75:4a:ea:ba:db:c8:f6:
0b:79:6b:be:30:98:bd:8f:92:43:a3:df:46:12:db:
b2:cf:c4:26:01:49:d7:5d:0e:bf:2e:6e:39:82:4a:
38:39:61:0d:93:96:f7:bd:51:6b:7b:df:6d:34:90:
2e:9e:10:77:e8:6f:97:fe:05:65:c3:13:84:93:85:
2c:9f:13:3d:00:80:6b:4f:7f:85:ee:10:ae:6f:24:
52:72:7d:dc:29:d2:3b:07:4e:8b:7f:a5:82:39:9a:
61:19:84:74:c6:2a:09:88:a3:a8:d1:a0:ca:03:61:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A9:03:A7:20:E9:E8:03:DD:F2:E4:5F:1D:C7:A8:E7:5C:C0:80:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:9000::/40
Signature Algorithm: sha256WithRSAEncryption
88:d7:1e:a4:e4:28:c8:b0:43:99:df:82:b5:85:05:48:7a:50:
ec:6f:a3:76:18:e7:c6:7f:29:fc:ea:4d:14:59:b1:d6:f5:4b:
2b:39:07:d6:db:a5:fb:22:b8:cf:e3:10:c4:24:3e:41:18:7c:
33:af:2d:c9:98:f2:ee:57:52:70:df:2c:bd:5c:df:16:4b:8c:
fd:42:21:72:f7:b1:ac:0d:56:be:83:aa:3f:a3:de:7b:f3:93:
ef:9b:fc:6b:78:b7:c6:c4:92:47:78:95:d4:db:cc:3b:44:5a:
e9:c9:54:a9:05:4d:af:df:b7:d3:6d:56:6e:01:78:49:1e:9c:
a9:a9:b4:23:98:bf:3a:3a:31:2c:0d:6e:54:01:d5:fe:dc:38:
d8:b2:5d:78:bd:a1:88:23:88:dd:5a:13:85:60:9f:45:81:52:
9a:1a:4d:bd:47:9d:75:6f:7c:70:b8:6a:23:db:05:a7:6f:b1:
c4:5a:4c:10:f2:f1:a7:ac:63:54:7d:cc:ce:40:a9:9c:a7:f0:
f3:37:5f:3b:74:9d:10:97:c2:5f:f1:cd:f1:ee:02:c7:46:57:
96:6d:ed:9a:a8:da:f4:28:aa:07:95:d5:b6:f8:9c:08:1d:41:
5b:40:25:a4:41:4b:c7:74:07:c2:b6:35:64:d1:04:29:04:a8:
d4:e6:91:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:06 2025 by rpki-client