Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa
File: 7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa (raw, json)
Hash identifier: 0J0K6TeBXP3OaV/KVyhhB+NEKQCxgOfEzcXHJs1rDdw=
Subject key identifier: 23:87:C2:B0:B0:BB:2D:DE:AD:83:CC:EA:F8:60:9B:10:BA:FC:13:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EFC7DF09EB1745F0869D35925762C2C73A35AA1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fc:7d:f0:9e:b1:74:5f:08:69:d3:59:25:76:2c:2c:73:a3:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6537cbdb9f214855ab8ef199272e5133febfa6c09f414be0d9298de439d811ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:b1:5a:4c:87:a3:8e:db:9c:ba:a2:2c:40:
db:d0:94:b7:a4:5d:70:61:09:e0:07:06:63:d0:6d:
53:cc:bc:d9:11:cc:f2:a1:45:ee:aa:cf:86:b1:df:
1b:75:b2:6d:6a:f5:a4:39:3c:2f:82:1b:fc:73:ac:
83:dd:23:70:44:25:5c:db:af:e6:f6:57:21:a2:27:
f7:42:18:ab:e4:d7:42:97:36:c1:61:18:f6:72:92:
5d:c7:59:81:45:57:9f:23:b6:c0:c4:5f:72:29:e6:
93:79:5f:af:ee:f0:db:f6:5d:6f:ce:74:f7:c1:1a:
56:3d:61:ac:9b:90:99:97:d3:65:ee:93:19:c6:2a:
21:ac:97:df:e7:b3:b7:91:9a:8f:3a:8b:37:f1:2f:
e5:34:8c:e5:86:19:2d:95:b7:06:50:7d:48:4e:87:
c1:da:e2:66:07:9e:18:5b:6d:d3:55:87:1d:af:67:
f2:b7:08:28:66:6c:49:df:bb:e7:14:0a:5c:3d:75:
4e:6a:37:5f:38:0c:a2:12:5c:51:0f:11:e4:75:82:
5a:3f:5a:cb:c6:c6:41:0f:43:cf:b7:7f:f3:cf:aa:
10:b6:5e:1b:c4:78:53:22:8f:c9:8b:e0:a3:2d:c3:
40:48:60:4a:1d:2f:50:60:c6:3a:7f:c2:d6:84:c4:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:C2:B0:B0:BB:2D:DE:AD:83:CC:EA:F8:60:9B:10:BA:FC:13:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
00:0f:e0:74:df:43:38:39:fa:9d:9e:0b:21:49:9a:e5:cd:f3:
ec:e1:1e:52:c1:10:88:8d:fc:2d:bc:46:08:b2:60:77:26:73:
0a:75:c1:a4:7a:9f:d2:ed:d0:ad:0e:03:72:8a:cd:cb:29:96:
8a:b8:d9:54:e7:4b:3d:29:06:3a:95:17:7a:1b:6b:e1:40:81:
ec:12:3b:02:33:16:c0:ab:fd:a6:1f:5e:ec:9e:d4:43:28:e5:
ef:89:8d:b2:db:8f:04:4b:df:02:ce:5d:9b:a7:16:f4:fc:dc:
5c:b3:36:69:2c:74:d2:48:28:86:f5:cd:1f:7f:b8:90:a7:9b:
53:92:55:58:0e:47:fa:15:d0:a4:b5:f0:20:ab:ba:d2:08:d1:
f7:1d:30:2e:e7:91:26:5f:18:3f:f6:5f:9e:b1:91:84:84:90:
60:33:a6:fb:98:fd:7c:f6:e1:ad:11:2e:2f:6f:75:34:7c:30:
32:bc:12:82:bc:d4:7b:04:76:5c:25:68:08:a8:e6:bf:b5:4a:
9b:55:13:ac:dd:16:f0:55:e0:95:fc:0f:bc:e2:e1:15:b5:54:
7e:dd:b3:bb:47:e4:62:00:ab:df:5a:4b:27:da:7d:d6:3e:a6:
32:93:fc:76:d1:7e:d0:51:b1:ff:a8:22:36:84:2b:1d:0d:90:
82:20:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:58 2025 by rpki-client