Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
File: 7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa (raw, json)
Hash identifier: K1X8aHcd6yTizrOQFwXgRuU4oxVU5GQJOkZr2if1F+c=
Subject key identifier: 13:93:E6:62:4B:B1:0A:FE:B6:1F:7E:9B:76:FA:DF:6C:0B:5F:92:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53CD1D5D76CB39D094E0FF3C737A824BA1E38BAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:cd:1d:5d:76:cb:39:d0:94:e0:ff:3c:73:7a:82:4b:a1:e3:8b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=36b2c07e47d354c4b8c60b81abd2707b049340e44d3f808820e155ba457dfe8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:8e:19:d8:66:1f:5d:47:1c:b6:b2:b6:e7:
ae:06:86:f4:3a:23:41:60:64:f5:1a:3d:75:c2:1c:
d6:ca:10:5c:ba:97:df:a8:62:1d:99:28:85:f1:66:
a0:d1:0c:83:8d:f2:82:e3:4d:1f:98:50:c5:eb:0e:
45:93:4d:33:22:42:5c:77:e8:0e:84:b2:60:00:c1:
ad:c0:af:83:43:2d:b0:7f:9e:71:63:02:8e:15:67:
28:ff:50:90:28:7f:ef:bb:fb:f2:fb:6a:d1:12:01:
37:c1:ec:59:9f:67:ab:6f:f5:1c:6a:35:90:59:57:
44:a1:a5:cb:d0:e7:3b:e3:aa:cc:13:47:74:49:60:
35:90:93:21:25:fd:04:98:49:dc:04:fc:c5:a0:94:
c8:89:04:4d:ca:ba:b4:c1:2b:9a:05:8c:15:4a:66:
0a:67:e9:2f:2d:a1:ce:3e:90:c3:e6:65:f8:5d:8b:
d9:95:fd:a6:ce:7b:9f:f3:a0:54:87:03:e8:67:1a:
34:e5:c3:c3:93:e4:74:59:b3:b0:2c:06:58:43:cb:
fe:65:15:db:84:08:c5:62:68:a2:e0:da:92:a0:28:
1d:33:b1:28:be:ff:e9:68:bb:28:9a:3f:5b:0d:87:
a3:fc:e3:f6:85:db:7c:e4:1e:69:86:b2:1d:9e:9a:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:E6:62:4B:B1:0A:FE:B6:1F:7E:9B:76:FA:DF:6C:0B:5F:92:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:9000::/40
Signature Algorithm: sha256WithRSAEncryption
05:9e:62:f7:0b:53:56:33:e0:ce:ec:12:56:ab:28:21:d7:e2:
d0:2a:92:f0:57:9c:68:2a:28:04:5e:af:12:cb:3e:f6:a7:10:
ed:0f:84:f1:d1:63:c1:fc:d8:f8:f2:17:86:c1:0b:80:cc:eb:
99:0c:7e:b8:23:6b:dd:2d:62:b6:24:ed:8e:55:db:12:c4:02:
fe:63:90:cb:1e:a6:de:0b:d0:55:2a:cb:56:7e:25:2a:c7:d3:
b7:b9:39:cf:b1:b6:a8:67:6c:08:21:d7:bd:97:26:05:83:22:
00:01:89:7e:48:7b:62:30:21:6c:79:7f:f4:55:2f:64:c5:e2:
22:dd:35:c3:ab:2e:a3:3b:eb:1d:89:63:e5:b2:6f:db:2e:c9:
45:8e:2b:fa:32:8d:f1:5a:c2:77:3a:db:a2:4f:95:a6:6d:89:
22:2b:f8:bd:67:d6:74:a5:27:9b:e8:3b:85:e1:9e:66:6b:79:
79:93:89:f0:1e:18:f6:3b:64:d1:da:c0:ec:69:b8:7e:cb:bc:
bf:ef:03:00:09:4d:a4:15:39:ae:d0:0d:e3:9d:cb:ee:73:22:
35:39:17:e2:e3:89:da:12:de:43:a6:a3:4b:e0:64:53:69:8e:
23:bf:5c:b7:05:d4:42:c0:94:11:0a:99:22:5c:9a:a8:5f:15:
bb:4d:5d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:18:33 2025 by rpki-client