Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
File: 7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa (raw, json)
Hash identifier: /vmHOQp4Iz++KqLB4w5GgdgjjFS+JcY6qsQGdMbMzLM=
Subject key identifier: 9B:E6:34:19:26:91:F7:6C:6D:3E:0E:98:8A:8B:60:45:6C:09:0F:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1677B3823ABFF99B464AA020F87FC633A37AFEFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:77:b3:82:3a:bf:f9:9b:46:4a:a0:20:f8:7f:c6:33:a3:7a:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=029ce6132c7066d853a64ad7aedef15aa38252f83779b3c5e7cf8e9f93deb0bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:03:5c:4c:da:75:37:f6:c5:29:93:51:2a:
0a:8b:09:8d:ab:62:01:67:3c:a2:59:33:ad:cf:3d:
be:95:51:66:52:bf:4d:aa:28:6e:1f:12:79:87:97:
fa:ef:21:0b:63:19:07:c2:eb:c5:ca:df:c3:b3:5f:
bf:41:05:8a:7f:f5:64:9a:3f:dd:d0:a9:d2:81:f7:
55:53:43:66:fd:55:45:bf:2f:16:9a:2a:bf:08:bd:
fb:f1:d7:13:e8:9a:6e:c1:6f:b6:31:b0:99:24:40:
78:c7:d4:27:42:00:fa:5b:6b:52:05:d4:d4:e1:96:
bf:f5:6f:67:0c:a4:11:8e:4b:2b:be:6b:0b:a9:a0:
96:5c:22:ad:be:15:12:00:71:cc:e4:ab:7c:2f:7a:
b0:7d:4a:04:ef:8a:e3:76:ea:05:a7:07:84:3f:e7:
61:95:f5:bb:cf:a3:4e:eb:8c:85:b3:5a:25:bc:01:
49:27:4e:ce:29:e9:bd:ac:d1:10:e5:0d:c7:5f:52:
72:b7:ae:12:af:85:db:77:ba:13:10:75:63:95:6d:
b8:d7:85:b4:50:d9:ca:35:f1:6f:39:44:86:8a:9c:
24:07:dc:1d:de:a5:d8:fb:9d:36:26:91:8e:65:d7:
fb:01:b8:4d:15:8a:7b:bb:e8:2d:f3:75:04:05:71:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:34:19:26:91:F7:6C:6D:3E:0E:98:8A:8B:60:45:6C:09:0F:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1040::/46
Signature Algorithm: sha256WithRSAEncryption
79:64:2f:0b:56:b5:30:83:94:01:f6:b1:2c:1f:93:03:06:ef:
b8:6b:f5:b0:23:87:43:fc:1f:38:36:cd:cb:10:72:cc:a2:06:
d9:ce:37:e9:af:73:0b:09:9f:31:ba:d5:3c:32:3d:87:eb:86:
2e:be:0e:ce:bc:83:a4:c0:a1:3e:68:6f:94:be:ac:8c:92:78:
79:07:64:28:2c:8e:e3:4e:27:f1:bc:e3:51:b0:09:0d:c0:7d:
f2:00:5f:2a:f7:23:33:60:87:40:20:75:6a:2f:eb:2a:b7:68:
50:fb:2c:e4:ed:9e:0f:de:2e:50:48:f3:7e:f5:41:80:50:07:
ec:f8:d9:ea:ba:38:88:90:24:22:9f:30:94:fa:ee:df:60:1f:
ea:83:a4:c2:f6:91:78:81:2e:3b:d5:4c:a9:ba:5a:8c:9c:10:
e0:03:76:da:9b:67:70:24:83:52:84:a5:80:b0:06:a6:31:82:
64:70:8c:21:9b:bc:30:0c:98:41:c1:9f:62:89:6e:1f:b1:de:
8c:30:55:4d:ec:2e:77:b8:21:ba:a3:34:52:14:0d:88:ee:d2:
4a:4f:81:f2:51:62:0f:d4:9f:60:0d:59:6e:2c:e9:86:e8:50:
69:e9:f7:0f:e3:91:bb:47:6d:21:07:f5:d2:4a:fc:b7:48:b2:
a1:9d:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:29 2025 by rpki-client