Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
File: 7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa (raw, json)
Hash identifier: 5w4a5r4VO9V4le8Yd3uFMOI/8+xXmuCqEvoJAdZtLzA=
Subject key identifier: B7:33:D0:9E:15:0C:2B:AA:DC:24:FA:BC:14:2F:8C:1B:56:CC:71:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C11809F07F9910EB5FB9F74B6A4D17D76BB2AFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:11:80:9f:07:f9:91:0e:b5:fb:9f:74:b6:a4:d1:7d:76:bb:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0bb893926983ee4c551adcc5c7de1a251b3c89f92c7cd9a8ddb1e9a8339b0e39, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:17:ed:d2:da:75:03:e2:f0:03:85:66:3f:
83:96:fd:b2:22:74:65:b1:55:5a:e9:21:11:dd:48:
d8:be:0e:b3:9d:6d:8f:f3:90:58:42:53:cf:f5:06:
7a:42:b4:9c:41:77:b7:56:df:1a:70:8e:41:56:72:
20:f1:ab:32:dc:b4:1a:d0:65:0a:0a:fe:e0:11:d5:
31:96:b2:71:c3:ad:1e:d2:28:fa:fc:39:8c:29:45:
d0:cf:c0:70:04:8b:c6:b6:e0:04:b8:27:2a:8b:5c:
94:de:cc:4a:20:a4:2b:05:ad:f6:8b:11:f9:c1:f7:
d6:43:0c:d9:10:5d:11:94:70:e7:fe:3c:6b:97:8a:
dd:9c:cd:62:9f:cd:e7:88:7f:92:cd:b8:5c:d2:a3:
bb:01:bd:9b:25:ce:ec:d0:a4:03:fd:7c:af:a5:18:
c8:15:26:ea:69:6b:1f:67:f1:1d:e0:6c:cf:a5:f1:
2a:a0:9f:dc:ee:84:d4:96:73:c0:cb:6b:a1:6c:11:
aa:c4:85:cc:80:d0:61:cf:54:c8:cc:7b:24:5a:4c:
ab:30:a4:87:57:33:9e:e3:5b:01:8d:14:42:6f:4e:
af:0c:62:fd:73:a2:fe:be:bb:3e:2b:d5:c6:fb:2f:
89:62:51:34:0e:c4:eb:b6:c4:a3:ab:7e:3f:97:31:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:33:D0:9E:15:0C:2B:AA:DC:24:FA:BC:14:2F:8C:1B:56:CC:71:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/36
Signature Algorithm: sha256WithRSAEncryption
5d:cf:57:11:63:8d:02:07:de:1c:0b:c8:53:12:6f:e0:91:59:
be:ec:d4:11:6f:36:d7:a7:ae:13:da:4f:9a:36:22:c9:e8:63:
ad:b6:d7:23:ee:2b:cd:f2:f0:2d:73:eb:bd:18:43:01:41:11:
0e:e5:77:df:07:16:24:05:0a:a6:1d:9e:e3:2a:25:db:37:69:
c2:00:78:b3:72:ed:5f:cd:44:8e:67:ef:36:94:29:1d:2e:e6:
a7:47:46:e9:bb:bf:bd:fe:8a:3e:ac:7e:09:be:7e:a9:cd:a3:
5e:42:df:ec:e8:b5:cc:34:47:d4:40:d5:ab:13:8a:58:09:62:
8a:3f:26:2c:2e:44:96:35:c9:8e:16:e9:15:92:3c:21:6c:90:
b5:48:5f:32:1f:ac:3f:a5:9d:1b:1a:05:98:07:01:cd:93:03:
8f:c2:aa:be:f6:de:fa:a4:dd:ea:4f:25:d8:2b:10:29:6c:d6:
38:6d:c0:ec:83:1f:2a:a0:7a:9f:ab:9b:d2:b9:f6:24:aa:ed:
52:72:61:cd:fa:5f:ee:43:f8:2b:bc:77:76:64:ff:d7:87:38:
84:6b:83:e8:f2:7c:9a:31:df:e7:35:f6:78:34:22:b5:2e:c6:
24:11:4f:24:9c:b2:1a:5c:6e:a7:ef:d7:8e:9f:f3:27:69:e9:
7c:aa:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:43 2025 by rpki-client