Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
File: 7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa (raw, json)
Hash identifier: gb7OPOYXnHAbeKTAdonxSP3MlpJ2Oh95sEEtVxJUQ7w=
Subject key identifier: BB:A3:6A:0B:36:32:79:2E:0B:39:C8:4C:5B:12:5A:56:4A:CE:92:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54FF9F91B6FFDE8513F924C0B03DD811BF0E4FAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ff:9f:91:b6:ff:de:85:13:f9:24:c0:b0:3d:d8:11:bf:0e:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=266aa52bdb2bc53da4471a02600013f93a5ec71c87833f60dc2aff777ecbaf06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:8e:c6:1b:ce:0e:fb:76:b8:56:06:92:8f:
10:16:1b:49:72:21:fd:92:f7:c9:18:ef:97:c1:cb:
ca:b2:13:9a:08:44:41:dc:71:97:78:1c:57:d4:f2:
a3:51:fc:14:6a:bd:ae:f0:c3:8e:e7:23:34:30:a4:
d2:28:9f:6e:a8:8d:98:83:20:67:a7:c4:cc:c8:7b:
e4:e8:a6:1f:4a:04:db:ee:b1:66:84:61:3c:ef:d1:
94:3e:18:c2:b6:0c:fc:bf:fd:ac:d5:93:c0:28:e3:
c4:72:51:f3:da:55:5d:93:12:8d:06:86:02:c9:4c:
fc:92:8d:62:10:14:16:64:c1:35:67:28:f9:c4:d9:
40:ce:a6:18:be:ec:d2:89:71:2d:f6:10:b7:1f:ca:
e6:6a:36:8c:e4:b8:2e:5b:b9:4b:1d:b6:9a:6a:be:
2e:13:d2:6e:7b:12:e3:a9:b2:65:47:4c:77:c4:92:
8b:cf:39:94:77:67:e0:d6:b6:df:21:d1:06:87:38:
1f:a9:cc:a8:d3:2e:98:5b:35:33:70:3b:f6:d6:04:
e2:cd:ea:fe:a6:43:92:4d:93:38:5e:00:17:68:5d:
f7:c5:f4:ac:4f:e9:15:1e:05:ed:43:a1:99:5a:6b:
f4:92:71:45:a8:ce:52:db:82:de:4a:21:91:d2:07:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:6A:0B:36:32:79:2E:0B:39:C8:4C:5B:12:5A:56:4A:CE:92:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8000::/40
Signature Algorithm: sha256WithRSAEncryption
66:69:05:29:0e:b0:4d:67:eb:f9:f5:db:73:fd:28:a7:27:13:
27:29:9e:a2:25:99:81:81:38:e0:ab:de:04:85:a7:a0:11:72:
e5:cd:1c:8d:72:8f:7f:4c:af:45:ef:0c:c1:22:ac:e1:e3:34:
9e:d6:cd:35:4a:31:9c:9f:48:6a:df:3e:d9:9d:5e:26:46:3a:
33:c8:80:af:58:88:05:9c:f3:60:27:4f:b3:5d:73:5f:6d:e6:
b6:53:71:0b:d5:00:93:92:21:84:5d:06:1f:5c:af:15:1c:75:
28:db:65:2c:58:c1:2e:64:e8:3a:0d:78:70:f5:95:67:8b:9b:
58:c8:21:31:64:33:26:f6:54:5c:23:35:d0:9d:84:e5:7f:9d:
bc:52:9d:aa:b6:91:75:f0:3a:a8:3b:e6:b1:fc:f4:d2:44:76:
eb:28:eb:3c:3c:1b:a0:ec:47:b0:8a:e5:59:47:b6:e1:c6:06:
fd:68:99:1a:1b:19:3b:41:aa:69:6f:b4:f2:29:52:8d:5c:0f:
6e:8b:84:19:ee:99:a8:2f:44:69:fa:af:10:e4:49:07:42:0d:
89:60:42:d9:1a:24:f5:8b:91:3d:dc:4d:05:9b:7d:98:a9:ba:
3a:06:32:cc:08:94:32:f1:11:bf:7c:18:ea:3c:31:3f:e6:0f:
c6:91:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:49 2025 by rpki-client