Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
File: 79440387-66a3-4852-a94b-8a3250f20726.roa (raw, json)
Hash identifier: e0bOgJ4H/jtja2ja/QGEcdZzZbwARJ0K8dhhPHfiM4w=
Subject key identifier: 16:3D:46:95:E1:3D:92:0A:1E:D2:58:F8:8A:26:AC:6D:72:A6:1F:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CA1F55B5664BB2FD9F7D0FD63AA6892FE993667
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a1:f5:5b:56:64:bb:2f:d9:f7:d0:fd:63:aa:68:92:fe:99:36:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=acd8af89ea82ce2902ca4984aaed44f379be16b21b824bc51dd22eba0ad1a0eb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:5e:8a:5d:63:38:3f:a2:d2:9e:d5:e9:fa:
6e:d5:93:69:79:06:ac:40:99:12:2d:ab:14:a3:d3:
2d:22:02:76:9f:e2:43:91:28:16:fd:7b:6e:f1:9f:
e3:fe:5e:3e:44:0b:7c:a4:c2:6e:55:07:e2:1f:71:
7f:02:96:4b:d4:92:dc:d9:8d:88:24:55:6c:8d:5f:
1b:99:24:e1:f3:2c:f2:7c:ba:a5:bf:ac:cd:63:7e:
76:13:ed:b1:ea:fc:36:3f:3b:79:0c:2c:e2:48:7d:
c3:f9:0e:f6:61:6d:05:ed:4c:f5:b8:c1:8c:52:dd:
13:85:ef:bc:08:2d:0c:30:c1:d4:17:ce:fd:4a:ef:
5a:7a:c9:11:09:00:8d:d6:80:7c:1b:77:53:e2:00:
37:ae:28:e2:4d:c8:d0:fc:ed:5b:81:84:71:3a:5a:
50:b8:0c:ba:00:1a:c1:f1:a8:02:db:ae:57:f7:e1:
36:ed:01:e0:f0:6b:87:07:96:25:9b:ba:f0:dd:bc:
16:43:e9:e7:5c:32:3f:d6:a2:21:33:c3:f4:f7:be:
e3:10:b8:d6:76:96:48:19:93:43:a2:04:7a:5a:4d:
67:91:e4:79:1e:b9:b7:5a:88:83:96:6e:17:59:d4:
09:de:87:72:c2:a3:54:46:ef:c5:68:da:25:65:e3:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:46:95:E1:3D:92:0A:1E:D2:58:F8:8A:26:AC:6D:72:A6:1F:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a040::/48
Signature Algorithm: sha256WithRSAEncryption
63:e6:f3:dd:ba:be:b8:1b:54:fd:3e:2a:41:c3:dc:1c:35:9b:
35:8d:d5:47:f6:d6:8a:0f:71:22:9f:25:59:fc:57:81:85:26:
f8:48:86:5d:01:04:56:05:de:03:be:20:33:05:28:6f:c1:82:
63:4a:49:16:93:44:99:1f:b2:5a:e6:70:19:52:29:17:1d:3a:
ea:b0:4b:a0:62:b6:ec:10:a1:4a:b2:f5:9c:44:19:29:3b:35:
85:77:43:a9:b6:d0:81:84:87:7e:24:41:bb:7d:d2:a2:9b:79:
80:68:1d:78:ec:ce:b5:ea:09:32:d8:a0:eb:9f:20:eb:9b:0f:
f9:cd:5d:73:dc:9b:47:de:a4:ee:53:96:8d:b7:55:45:bd:fd:
7a:6f:23:25:6c:f1:8e:ca:bf:c6:ff:76:6c:70:5a:8f:5d:cd:
ca:f5:06:ad:e2:1c:0c:c0:3f:ca:77:a8:f1:a5:d5:be:07:3b:
ec:19:87:1e:d6:90:19:4c:8b:1e:6e:c0:62:6e:43:07:31:55:
54:31:44:e9:fa:3e:65:2b:6f:2f:b6:eb:a8:c1:30:c6:f3:3a:
12:7a:7d:b9:b7:ae:ee:de:8e:91:7d:2d:31:60:34:72:ca:07:
3d:7a:ff:29:60:be:eb:f4:f2:ce:05:85:e7:80:62:5f:14:c3:
f2:81:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:46 2025 by rpki-client