Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/791beea0-a041-4e83-a3bb-074f4f65225c.roa
File: 791beea0-a041-4e83-a3bb-074f4f65225c.roa (raw, json)
Hash identifier: wR+dpLE931BLODIbKIcSZoGuFbg9sLfwPpliFC6NLs4=
Subject key identifier: 6A:FD:9F:BA:D7:8F:E7:45:A9:7F:C9:FE:50:28:C8:DE:5C:0D:B6:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 107D2AE09B65F2B13A631F58867C510EE9431F74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/791beea0-a041-4e83-a3bb-074f4f65225c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:50c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7d:2a:e0:9b:65:f2:b1:3a:63:1f:58:86:7c:51:0e:e9:43:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=519bc71b173949eefb0c5df0d22bab6e17298cc2728dbe12f60ae93f962de640, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:79:70:49:6d:b0:01:2f:05:92:2a:7c:2d:
ec:15:fe:fc:d7:d1:8d:d9:c6:92:1e:2e:18:d8:a7:
68:f5:03:fe:2b:0c:73:f4:ee:9c:91:17:df:22:65:
6a:ea:a6:54:d7:a5:2e:e1:01:da:18:98:6f:85:d9:
4d:18:14:88:5a:7f:05:f5:f9:61:ab:87:9b:cc:06:
a3:ee:ec:ed:32:1a:4a:0b:19:4d:63:33:31:6c:60:
1b:61:ee:7e:a8:1f:90:61:40:dc:91:6b:69:d5:16:
3e:e9:a0:b1:54:30:2c:d4:c2:58:a5:c6:55:8b:1f:
a0:b6:0b:ad:d4:54:d3:2c:09:bd:e1:fb:a7:cd:a2:
2c:cb:c0:60:f5:82:ca:f7:db:80:48:a3:3f:8b:a0:
8e:39:a7:8c:6e:86:e3:55:76:74:81:1f:fd:c9:45:
67:30:9a:bf:43:90:5b:64:18:91:09:43:fd:d5:f3:
ce:30:6c:47:ff:41:8b:ed:30:48:7b:1a:14:16:f6:
c1:78:0d:68:56:06:f0:f2:a0:c7:37:a0:7a:de:52:
48:04:8e:a8:5b:4b:93:e6:46:d9:27:79:a6:05:42:
e7:a8:e8:04:88:14:b0:41:b9:80:da:11:93:e2:e2:
90:23:54:86:f3:b6:39:58:61:3c:f6:c7:d8:84:e0:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:9F:BA:D7:8F:E7:45:A9:7F:C9:FE:50:28:C8:DE:5C:0D:B6:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/791beea0-a041-4e83-a3bb-074f4f65225c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:50c0::/46
Signature Algorithm: sha256WithRSAEncryption
58:16:e0:e7:7d:2e:d4:45:21:90:7b:04:c0:5f:dd:97:09:ff:
0f:e7:0e:a5:87:0f:fb:6f:64:b3:07:a1:52:30:75:09:bd:cf:
70:0c:40:8b:bc:ff:3b:5c:0a:28:f5:06:86:06:f6:97:91:e5:
da:d4:dd:0e:9e:54:59:5c:45:6c:71:2d:e3:12:59:1f:01:e8:
74:73:19:54:40:c8:96:2c:1b:88:94:8c:f5:e1:36:b9:a1:ec:
5e:17:d5:30:92:ee:13:5e:7a:25:09:7f:63:db:ee:83:55:ee:
6c:dd:dc:61:ca:f7:2c:35:e3:ce:66:f6:e8:12:ae:7d:38:2f:
bd:36:10:99:8d:a4:dd:7d:54:8a:50:8c:d2:c9:59:5d:61:87:
ac:fe:78:fa:4a:ee:86:41:1d:73:0f:63:5e:fe:85:f7:dd:d4:
28:ce:a3:cb:d0:e5:c6:3b:62:1c:bf:4a:98:79:18:59:d5:70:
4e:62:ca:58:cd:b3:6a:ae:ba:8b:39:6e:76:94:22:6d:75:2b:
32:95:63:32:23:03:96:75:9b:d3:ad:23:d3:56:23:44:3e:4e:
e2:52:fe:7c:e4:51:06:39:a2:77:cc:1d:59:cb:e7:ca:6d:3e:
99:08:df:37:b4:76:5e:18:b8:77:de:f8:1b:0f:ae:bb:cd:68:
7d:cf:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:14 2025 by rpki-client