Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
File: 7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa (raw, json)
Hash identifier: qiPY3bgSdnSUrAjGZbt3kdkBocwZYbeMVMZFueWpSJM=
Subject key identifier: 37:B1:30:B6:E8:80:00:E6:44:09:E0:E2:E7:F4:AC:1F:FA:C2:D5:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 331B74F588EF7FA3225F3B4BC58BA62DDECE7276
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1b:74:f5:88:ef:7f:a3:22:5f:3b:4b:c5:8b:a6:2d:de:ce:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=d05fcd6c6608586da87ab202b196d679c7cb598929311d7714abcaae06806ec0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:2e:b9:d0:99:6a:41:cf:f6:36:c4:a2:93:
6d:70:f8:d8:42:5d:37:f4:79:c7:e0:52:37:76:56:
72:35:67:ba:49:64:7c:81:80:65:5a:3d:d0:bb:04:
5e:78:82:ad:cb:73:e1:8c:2a:89:26:fb:68:e7:b3:
41:dd:52:d6:3a:77:0a:73:72:e4:95:0f:89:ee:77:
aa:9a:af:9c:ff:90:df:a3:99:d9:ef:45:67:b0:d1:
83:9f:ee:58:7b:8d:e3:64:4f:67:0b:77:74:8d:3b:
92:c8:e3:e6:08:e9:5a:50:1c:e6:47:81:a9:de:68:
a6:39:1a:14:8f:21:7a:12:b5:ba:3a:09:c7:a2:1d:
e1:44:f7:3c:d5:c6:43:d4:fb:7b:5d:33:d0:b5:c6:
60:9d:b2:91:32:80:a5:64:c4:cd:11:09:86:5a:c6:
26:b4:67:77:f9:2a:a9:60:3f:87:ef:70:85:11:03:
c7:26:5e:5d:a1:8d:bb:17:a2:90:ac:41:de:20:8f:
e1:e8:79:9f:ce:c1:57:e6:6a:d2:c0:d4:ce:1f:19:
a0:ca:a9:c4:29:b8:f7:45:1a:1f:c4:de:7d:c7:9f:
ce:c2:51:5c:22:59:92:19:73:2f:82:5c:61:61:bc:
0b:ee:9a:22:1f:d8:ec:cc:5c:1a:cc:99:f7:44:7c:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:30:B6:E8:80:00:E6:44:09:E0:E2:E7:F4:AC:1F:FA:C2:D5:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038::/32
Signature Algorithm: sha256WithRSAEncryption
9f:ca:df:47:96:82:d5:bb:fd:89:4c:7a:dc:35:9b:22:0f:28:
fc:ce:95:b6:00:33:dd:cd:f2:c1:fa:c0:df:6d:73:7b:b4:9a:
5f:8b:8d:4e:98:98:7e:4d:8f:e2:c0:74:2e:6a:70:1c:a7:e3:
d7:4f:97:96:10:e1:9a:e6:dc:55:07:74:f1:19:18:19:1a:cd:
84:c6:fa:45:50:03:43:b5:b1:4e:fb:ca:8b:87:e9:75:20:22:
1d:55:72:8c:06:fc:6d:02:9c:0c:63:51:e3:72:3b:9d:86:f2:
78:05:88:02:91:e7:d1:91:b9:ae:a8:e3:9d:46:5e:cb:bb:3d:
9f:99:93:12:7d:ca:b6:0c:14:af:7f:f7:51:3a:07:e6:4c:a2:
02:4f:11:3c:1b:c4:80:d1:b5:eb:c2:dd:1e:dd:9e:e8:f0:de:
95:b8:e6:b5:a2:a2:a8:df:11:85:3d:e3:12:22:8d:54:a3:ee:
86:4f:76:b7:29:01:07:10:c8:f8:4c:81:5e:63:91:84:b3:57:
6e:91:42:44:b8:25:a8:25:0a:6c:bf:33:4e:08:0f:92:91:d6:
f6:a5:f3:00:37:a7:ca:5f:ed:24:19:9a:8c:81:c2:22:df:9c:
5f:87:ea:47:33:58:e8:8f:df:57:32:40:06:52:df:35:68:69:
74:e1:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:58 2025 by rpki-client