Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74c7eb62-ad02-4aa2-9be5-024692c6239f.roa
File: 74c7eb62-ad02-4aa2-9be5-024692c6239f.roa (raw, json)
Hash identifier: SC+BwXuMLvHLW1ZP3I+u5Q4IA0gSw+P6VNYytj3vd+I=
Subject key identifier: 96:10:4D:3E:81:EF:B1:1F:A3:79:46:DB:02:73:B3:3A:BF:11:92:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29E329971F0A7EF995A9E998FC912417BDD9A174
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74c7eb62-ad02-4aa2-9be5-024692c6239f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e3:29:97:1f:0a:7e:f9:95:a9:e9:98:fc:91:24:17:bd:d9:a1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=e149448e9690e81b586a47e60d6bdb4b110555bc4451b491aee2d9ea4e99715d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:78:78:06:67:5c:ac:56:c9:f5:a5:1d:f7:d5:
f2:54:22:9c:05:db:58:92:7c:14:56:a8:52:93:70:
d8:54:a7:e6:4d:e2:ec:93:26:93:1d:ab:cc:50:1b:
88:07:c2:0c:2e:20:78:72:3a:a6:91:9a:7f:fc:ef:
42:dc:18:7c:3c:e8:2c:17:4f:56:5f:b9:d0:3e:ce:
d1:78:cc:ab:4a:ad:49:67:fd:c2:df:d2:73:b7:79:
2a:21:96:38:6c:6b:3b:83:5e:7e:e2:71:06:8f:4c:
8f:46:66:73:6d:72:0c:25:a1:78:78:94:d2:80:cb:
46:01:bd:eb:c9:14:14:6c:7b:8b:1f:51:f6:c5:58:
17:38:43:55:fb:f1:c3:cc:8f:ff:e1:66:d3:8b:8f:
cb:5f:a4:71:59:7a:96:dc:51:aa:db:f1:55:8d:27:
77:21:a3:6a:62:b5:7f:67:c1:a1:36:96:ee:72:98:
ea:07:80:fc:12:8e:4d:75:74:bc:d2:89:49:c7:55:
62:99:3f:5e:51:a0:7e:50:cd:f5:e9:7e:aa:a1:3c:
42:3c:e3:63:52:42:a4:d8:9d:70:90:b4:2a:a0:5d:
2c:f5:49:5d:cc:e1:dd:c8:45:18:70:26:09:7d:2b:
cf:01:d8:88:01:97:99:1a:93:13:96:6a:af:7c:8d:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:10:4D:3E:81:EF:B1:1F:A3:79:46:DB:02:73:B3:3A:BF:11:92:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74c7eb62-ad02-4aa2-9be5-024692c6239f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2000::/40
Signature Algorithm: sha256WithRSAEncryption
af:c5:ae:69:04:ce:23:32:19:3a:49:7d:6e:7c:a7:ff:b9:19:
fd:68:37:10:fd:8d:d1:1e:5c:69:89:74:e5:5a:d8:97:ee:0c:
f0:fd:48:b4:9b:74:bb:20:26:26:b4:be:3f:b4:58:6e:d9:1d:
2c:88:ef:98:3b:fa:d9:56:b3:38:46:4e:5e:6a:c6:dd:31:ca:
d8:f8:bb:b8:49:10:7e:01:6c:a7:07:10:31:21:cd:87:d8:71:
50:5f:48:72:2f:ba:5b:8f:37:b4:02:44:5f:da:2e:b3:d8:f4:
a4:9c:22:9e:f2:cb:0a:b5:c8:c4:56:cd:12:3f:b3:f0:24:dd:
b5:61:78:13:fc:ba:a7:45:8a:a5:e7:ab:e1:fb:e9:a6:06:8c:
c7:6c:5a:15:50:98:7e:1a:09:b8:7a:c4:f7:8c:30:92:13:13:
1f:2f:f0:d8:4d:0b:68:76:59:19:dc:e1:36:a6:c0:43:49:db:
58:33:a4:48:88:73:64:46:8c:3f:0e:6d:79:d9:26:f7:a3:bd:
87:2f:97:30:7a:f0:06:f7:04:55:95:8e:2d:b5:cc:a6:bf:04:
68:d3:fa:ef:0b:45:c9:6e:bd:9d:4b:91:75:ed:a3:74:9b:25:
c9:b3:e5:12:bb:fd:25:81:34:78:06:34:35:5b:d1:8f:af:a9:
93:9a:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:24 2025 by rpki-client