Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2215e7-5ee2-420b-8f98-5e0faef4cbea.roa
File: 7a2215e7-5ee2-420b-8f98-5e0faef4cbea.roa (raw, json)
Hash identifier: rbws3SbRFOE2hsI3EfiOnVvA7NzVW3RfYNGU/+0fR7Q=
Subject key identifier: CF:D2:E5:90:26:00:FE:16:DF:5E:B8:51:4C:5F:42:30:59:BE:65:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F355EEDCD38E644B7A6855023AE740B21F37406
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2215e7-5ee2-420b-8f98-5e0faef4cbea.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:35:5e:ed:cd:38:e6:44:b7:a6:85:50:23:ae:74:0b:21:f3:74:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=94f9df59a784fe2394716720e2220d7f2a04eb26cffb66ee4a8f85f6951394e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:1a:6e:d1:85:0e:20:f2:54:2c:e9:25:a3:
f9:91:e0:89:48:53:29:b9:93:e0:d5:fb:bb:84:60:
a9:a5:82:8a:e9:30:28:41:34:1a:a7:18:f0:23:fe:
f1:73:35:4f:50:63:f7:64:97:5e:83:cd:7a:f6:10:
5c:0b:5e:94:31:b2:03:da:13:48:ac:58:7d:bd:e1:
30:12:db:0e:93:82:53:3f:39:70:cb:7d:ba:43:26:
e9:43:5f:b4:ef:ee:50:cf:15:ed:09:04:c1:41:df:
be:4e:df:4e:5c:69:6a:07:e2:5f:ea:e4:a2:88:ba:
47:5c:5b:b7:b7:b7:55:06:7f:ca:80:85:33:38:6a:
6d:f0:19:f2:25:a9:40:cc:9a:92:d1:22:1b:89:0d:
25:97:e3:e0:1e:e2:04:e7:3b:d2:5f:cf:55:75:9f:
2c:6f:44:ef:b5:b0:bc:01:10:42:8e:e7:a4:c9:53:
82:cf:b4:67:dd:e4:a5:12:a4:a5:59:1a:40:36:a4:
0f:f7:a5:a6:d5:fa:cd:03:b0:51:00:80:4a:29:56:
cd:cb:2d:67:4d:fc:51:ab:61:97:0d:81:15:68:e5:
3c:5d:1d:6c:20:be:1f:f9:66:4b:ad:b0:69:e2:d8:
84:6a:79:52:3d:e1:38:ef:26:bd:dd:cd:e7:72:9d:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:E5:90:26:00:FE:16:DF:5E:B8:51:4C:5F:42:30:59:BE:65:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2215e7-5ee2-420b-8f98-5e0faef4cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:e000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:f8:b6:84:d6:a2:3c:49:89:d6:57:d6:b6:fa:6a:47:d5:cd:
4e:1a:eb:61:4e:2e:31:66:54:76:6d:e4:de:61:bf:23:45:f9:
fe:ff:1f:48:12:f8:07:c3:2d:94:d5:72:12:d9:39:a1:42:0c:
85:72:6b:4a:a1:43:41:8f:51:ad:48:13:eb:06:fc:97:05:25:
69:a4:77:f9:ed:54:64:bc:42:2f:8c:2c:7d:04:aa:72:96:7d:
f7:81:e5:96:c6:2e:85:ac:92:95:38:cf:ec:cd:85:af:aa:53:
58:8b:21:55:f2:65:a8:0e:fc:d4:d2:86:b3:91:05:2d:1f:bd:
e9:ab:20:3c:e0:69:8c:01:20:a1:14:84:e4:40:1a:91:47:5c:
07:96:d1:57:32:00:c1:3e:b8:54:99:e0:43:76:af:7b:a9:7e:
b9:f6:d9:57:8d:e2:b2:8a:27:be:83:43:00:61:67:b7:7b:7e:
fc:5a:1e:6d:a8:85:f3:dc:fd:cf:53:78:e4:f9:02:29:65:5f:
8a:e5:ee:1b:13:0a:7e:68:ca:36:f8:7d:6a:e9:e6:c8:71:8d:
5d:3b:54:5f:3a:fc:bc:28:d9:72:fa:f0:ec:08:66:f4:bd:c3:
cf:2a:86:00:4a:ea:2b:32:4d:f0:6a:c7:ee:9b:4a:aa:38:cc:
d7:29:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:55 2025 by rpki-client