Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
File: 757087af-5baf-4a2f-a9ec-dbadb47313e2.roa (raw, json)
Hash identifier: 9Nooxw1Fm/ujDW2bW/e7ZO3CGhNT1LqPE6A5vwrTwqM=
Subject key identifier: C4:0F:2B:D4:5C:5A:E5:1F:F0:CB:CB:86:CD:56:32:79:D0:BA:69:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 517DABBB710630093B11E7E8D4C2A968460843AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:50c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7d:ab:bb:71:06:30:09:3b:11:e7:e8:d4:c2:a9:68:46:08:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=95fb2bca2113bc445189c2766cd88d0d8ba552aeb3f26bf500dc6c0538159d0d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:b6:64:90:57:a6:8c:99:f3:f0:35:a6:6a:
d7:12:3d:11:4a:c5:2e:4a:f5:a8:e9:f3:4c:85:12:
de:4b:b6:af:40:fd:de:0e:83:51:92:8b:0f:9f:16:
d8:7d:b3:96:13:32:2e:31:2d:36:d6:e7:33:56:87:
90:5a:c8:51:38:a6:ca:e1:aa:54:51:9a:d4:d0:38:
8b:bc:b2:0b:47:4b:4c:48:1c:a7:f0:28:16:6a:6e:
97:c0:62:fd:89:cf:30:89:ae:cd:dd:f6:4c:d0:65:
0e:07:1d:93:d1:f9:73:23:99:ef:df:ae:7c:d7:96:
64:b0:03:44:49:f1:fb:c3:dd:44:5b:1a:23:17:cd:
8c:82:79:76:f9:f4:7d:ed:a6:a4:20:0c:77:03:29:
16:a6:b3:13:f4:65:f3:4e:4b:62:e4:00:3c:9f:21:
8f:4c:9f:9a:ff:b3:10:d2:0d:a7:ee:5b:e6:a1:6c:
e3:c8:2c:17:de:21:53:01:a8:04:d7:af:ce:fc:cd:
05:16:07:07:11:34:c8:22:77:00:81:03:63:48:25:
ea:83:44:5f:82:7c:1e:2e:c6:9a:02:3b:dc:5a:bd:
07:73:f6:18:40:7f:91:26:3b:71:89:7c:07:38:a7:
12:bb:4c:d3:52:b2:b2:17:77:21:43:d4:36:36:00:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:2B:D4:5C:5A:E5:1F:F0:CB:CB:86:CD:56:32:79:D0:BA:69:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:6f:37:05:bf:52:b7:54:16:d9:24:85:3f:e1:2c:2f:76:24:
eb:92:24:55:6f:d8:a0:5b:34:cf:c9:90:f9:2b:e5:3e:ba:29:
e1:b4:07:e4:35:6c:2d:5d:7c:4a:ed:22:69:85:ca:22:9e:8b:
25:14:ff:04:d4:08:4d:cd:4c:28:0d:54:e2:2c:07:bc:0f:98:
88:56:8f:03:f2:21:71:3c:93:73:d8:54:49:0b:83:87:32:f7:
66:7f:5e:c0:b1:bf:f8:77:c1:6e:91:ba:57:c6:af:12:f8:7b:
c3:ba:2c:79:0f:03:d9:e4:6d:b1:e9:69:3d:c7:23:67:8f:62:
14:10:75:4d:e7:16:48:3f:63:0a:d2:e7:7b:e7:a3:17:43:71:
49:4f:41:30:d7:9a:08:c4:0b:d4:ed:bf:2c:eb:cc:be:30:97:
bd:2f:11:d3:a9:b5:43:70:d1:cc:39:58:38:05:a7:5e:52:0b:
ed:ce:27:b5:77:8b:6b:c3:4b:ba:0f:4b:92:67:c9:68:3e:2c:
47:94:0f:f5:32:fc:59:66:e8:be:41:79:40:09:d9:27:fb:85:
17:0a:e1:50:39:51:ba:bd:77:5b:bb:34:28:c4:29:41:4d:43:
72:8f:bc:0b:06:64:6a:39:4d:98:8d:0d:15:ff:26:95:93:98:
29:e2:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:53 2025 by rpki-client