Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7c4014b5-e4ed-43b6-a5d0-7a5e8a764e1a.roa
File: 7c4014b5-e4ed-43b6-a5d0-7a5e8a764e1a.roa (raw, json)
Hash identifier: EweGYOlxadrvigr8N7m1p4c9t+5WUEhbttf4jsSDbbw=
Subject key identifier: 68:E7:89:5B:43:53:12:AD:04:18:5F:5A:68:BA:2B:4F:58:4D:71:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C1980949EDEE0A94F73AF8B070E838C92E173E2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7c4014b5-e4ed-43b6-a5d0-7a5e8a764e1a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:20c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:19:80:94:9e:de:e0:a9:4f:73:af:8b:07:0e:83:8c:92:e1:73:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=bd3f5456040bf0336ab3eb16efad73ccb8b701cb10e4fbeba7c054df15db505f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:c0:91:3b:ce:5a:82:51:64:93:15:11:30:
aa:3e:b8:aa:6e:76:95:95:50:82:23:58:6f:e9:57:
f0:62:3e:38:3a:69:ff:ca:18:77:dc:fd:d1:9e:27:
e5:59:75:b3:ee:91:bf:25:d8:fa:21:a7:29:25:f1:
be:10:13:d0:26:c1:6c:e1:7e:3b:df:cf:c2:68:94:
18:f5:a1:7d:54:d8:a9:8b:ad:09:6a:ed:f4:aa:d3:
c4:4b:79:39:01:ba:ef:03:96:37:16:43:81:a7:b0:
5a:45:42:5f:be:38:24:5e:e1:c4:5a:31:8b:99:d7:
e9:91:7a:b2:63:e7:1b:8a:ef:de:fb:2d:27:df:7c:
ed:e6:67:88:c0:37:da:7b:2d:b6:82:c2:18:a1:30:
fd:d1:65:69:ff:6d:bb:75:70:26:79:f2:f9:65:5b:
44:ba:04:0d:14:e9:ee:a3:98:2f:66:88:10:1b:f1:
1b:50:20:ae:b0:a3:0a:14:cf:20:0e:ae:25:77:34:
37:09:b4:a5:41:34:39:e9:77:ec:89:60:3c:82:9e:
d2:38:27:43:bb:ed:24:0e:9d:31:5a:0f:85:e0:7b:
61:50:20:0f:c4:37:e2:c2:47:20:a7:b5:3c:e9:ba:
a6:12:b8:73:b5:d4:a7:aa:2f:d0:35:69:97:54:42:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E7:89:5B:43:53:12:AD:04:18:5F:5A:68:BA:2B:4F:58:4D:71:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7c4014b5-e4ed-43b6-a5d0-7a5e8a764e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:50:f0:cd:ec:69:3d:24:00:b8:5c:1c:8d:9b:56:5b:f4:3b:
ad:47:c2:43:8a:8b:d8:47:c3:65:48:cd:f5:13:d3:21:4e:58:
1c:79:a7:93:41:ef:32:3b:a6:a9:a6:e8:bf:56:b2:bc:da:05:
a3:7e:c5:0b:21:98:30:91:1c:ab:9f:22:6f:76:7e:ca:dc:0f:
31:3d:f0:ac:a7:6e:17:8f:c3:42:7d:8b:ca:14:1f:81:00:d0:
90:33:75:f4:ab:0c:60:d7:37:ec:8e:fc:e4:f5:45:f3:af:f2:
a7:00:bb:53:7f:42:55:00:8f:97:c2:2c:a3:44:fd:fb:a6:29:
62:21:b1:69:73:96:d1:a9:72:de:96:43:f4:ea:37:51:cb:6c:
3d:2c:22:57:ef:a8:18:dc:f5:06:55:de:31:47:7f:ff:d3:53:
24:d9:3e:bc:98:94:04:7a:85:28:bf:52:8f:6e:58:66:cf:0d:
c1:d5:b1:6d:70:e5:48:35:ac:15:c4:fa:f2:dd:0c:8a:ed:27:
11:02:b0:f4:3c:43:5d:a2:cb:0c:93:68:cf:f0:e1:0b:d6:e2:
45:35:d2:f7:cd:e2:d5:c1:f8:e5:a7:e3:76:f0:a0:32:4b:a8:
a8:7d:d5:84:20:91:e3:06:96:bd:ae:11:bd:01:ee:62:a7:3e:
e5:2c:f6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:54 2025 by rpki-client