Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
File: 7af2d4a0-df22-4933-b605-1ecbbd66f982.roa (raw, json)
Hash identifier: CpnFYqGWFBWW2AWg/EDJXpQA9cgVNf8XkZ+6Fs+Jtxg=
Subject key identifier: 9A:0B:59:4F:3F:E2:24:FA:2C:DD:25:B4:61:02:99:0E:C5:60:45:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 655747A4FD6CCF5B85D6B18266A29EB672618522
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:57:47:a4:fd:6c:cf:5b:85:d6:b1:82:66:a2:9e:b6:72:61:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a6731703655bf04eabf8ecaec59e3036121a1cc1b8daaaee289caa9fdab94adf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:6c:ed:fb:91:2e:b7:cd:37:d0:92:58:32:
5f:10:dc:59:68:bc:a5:5a:0f:38:1d:08:9b:4d:06:
d0:24:3c:5e:60:91:fd:80:f0:14:de:83:1c:26:9c:
54:66:94:16:94:98:39:89:be:c2:b9:89:56:84:22:
e8:02:09:18:a5:e5:66:97:a9:9b:32:e5:df:b6:cc:
51:b3:84:e7:b2:1b:1e:3a:f4:e1:cd:f4:f3:d6:d9:
09:52:3c:31:e1:c7:40:4c:a1:54:c5:6c:c5:73:2a:
56:3a:21:e3:d6:9a:22:a8:09:eb:4e:34:ca:49:fd:
4a:7b:4c:e5:d3:39:4c:89:e0:e7:5b:6a:b9:2d:ce:
58:ab:68:42:8e:0e:7e:0c:a1:77:84:8a:f6:16:b0:
f3:bf:58:d4:a9:bc:f5:1d:3b:ef:73:7b:5f:7e:f0:
c7:56:36:34:4b:b1:7f:bc:33:b7:de:11:a8:a7:87:
cc:5d:06:78:71:76:80:b2:35:a0:2b:e2:a5:a5:33:
90:c8:8a:ba:56:3e:94:40:97:e0:b2:fb:b3:c3:d2:
d1:90:5a:ef:eb:9a:e1:fc:4b:58:a0:03:75:64:37:
5f:43:44:1b:d0:46:ab:f3:cf:50:d7:23:50:4b:6e:
8e:2a:e1:5e:5c:4f:1e:90:89:f0:d2:71:fa:7b:88:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:59:4F:3F:E2:24:FA:2C:DD:25:B4:61:02:99:0E:C5:60:45:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:c00::/38
Signature Algorithm: sha256WithRSAEncryption
a6:35:6d:6c:01:59:b1:e1:ec:1f:1d:59:6a:3a:68:63:3d:3a:
13:ce:d1:b0:db:4c:d3:51:a9:f5:59:6a:39:2e:13:1a:d7:4f:
3a:bc:ba:57:1e:44:03:34:dd:ab:bb:b6:fe:93:29:8b:4c:3d:
47:48:6c:9a:32:16:a3:7c:4d:62:6e:ef:e6:9e:f2:66:dd:47:
6c:5c:0d:e0:33:bc:6c:32:b2:50:78:77:cf:f4:89:83:e6:7c:
46:b6:79:10:ff:ba:f4:7a:75:19:10:8e:04:58:8d:c7:88:98:
4e:69:66:c4:c8:5f:0b:17:58:b7:f0:07:2c:b4:14:79:a5:08:
dd:99:36:33:6e:3b:73:3a:ef:f8:ea:9a:d2:f9:9c:e3:15:c4:
55:83:59:38:f9:f3:81:53:8b:9b:21:0a:80:30:e3:e0:7a:50:
30:a9:0a:ec:c8:2b:0d:d3:e3:c3:bf:af:bd:fa:60:9d:bc:88:
8e:57:b6:0c:c1:b4:9a:de:42:ad:5b:e7:10:1a:0d:d5:c5:40:
cb:e8:2f:f2:5e:b7:23:80:cb:d1:dc:5d:b4:05:f1:ca:04:a5:
63:12:8e:73:26:b5:ec:58:58:af:23:cb:dd:36:9f:ca:8d:5f:
32:70:ca:13:49:4f:ec:ff:af:88:a2:31:d5:09:9e:f5:45:93:
c4:0c:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:40 2025 by rpki-client