Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80a87408-515b-45b1-aa62-7e6516358bb6.roa
File: 80a87408-515b-45b1-aa62-7e6516358bb6.roa (raw, json)
Hash identifier: IilJ4cSJdctMJsgaE1C5Y0jRi9Vb1OnJ7LRE9Mr1C1E=
Subject key identifier: 5E:F9:D4:2B:D8:E1:F7:4F:D8:3E:7B:FB:CA:FE:24:78:0A:A0:D4:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B020431047EDE9434D4A8BBAE72F803D1762355
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80a87408-515b-45b1-aa62-7e6516358bb6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:10c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:02:04:31:04:7e:de:94:34:d4:a8:bb:ae:72:f8:03:d1:76:23:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3b97e63476aae10042b35c9dfbe4209d690c49e24d6d137ba3e404daec223439, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:2c:1e:82:ee:e5:9e:4a:6d:2a:5f:b1:26:
d6:4f:b7:a5:62:4a:b8:19:7d:26:b1:8f:bd:f8:de:
d6:25:07:3c:75:7a:4c:8f:cb:39:63:0b:de:d0:1f:
d3:68:eb:e8:80:70:a7:52:77:0b:74:3e:cb:20:98:
fb:11:3d:f0:b0:45:1a:a9:10:5d:9d:af:c4:70:f5:
b0:90:ac:2d:d6:94:31:4e:45:fc:e8:1a:64:97:09:
d0:ca:e4:5e:0e:b0:ea:93:38:a4:3a:dc:9c:f3:9b:
38:5b:f5:21:ef:af:fe:0d:3d:71:8a:ad:08:9e:a6:
d4:f1:36:f1:0e:c4:b6:f8:64:06:a1:3e:f4:78:09:
22:9e:cb:ca:6e:26:e7:88:11:27:a0:90:0a:a8:8d:
53:73:24:a2:f3:57:05:57:b4:92:ca:47:a5:1c:b3:
0e:85:07:f2:b9:21:04:52:c6:d6:3a:b5:62:78:75:
57:78:72:5b:35:3c:a5:46:20:14:63:a0:aa:2b:57:
19:77:86:86:4f:1d:b2:4e:5b:55:66:6d:bf:86:b6:
e7:73:9a:c1:a4:16:b8:02:6d:fd:cd:10:0e:8c:1c:
3d:3f:7a:ca:83:9f:d4:fb:a2:7e:5f:87:e6:6c:ed:
9a:2b:bb:91:47:fa:a9:4e:7b:71:ac:e4:f6:d5:19:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:D4:2B:D8:E1:F7:4F:D8:3E:7B:FB:CA:FE:24:78:0A:A0:D4:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80a87408-515b-45b1-aa62-7e6516358bb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
7d:ff:2c:99:be:0f:5a:cd:d1:5e:dd:2c:ac:e8:dd:ea:cb:5a:
0f:ae:c5:09:6a:06:ae:02:b7:bc:d6:80:23:72:8e:93:2a:32:
a7:2c:84:3c:09:28:3f:bd:89:65:e6:5b:41:0b:2d:e8:b3:11:
af:fc:25:0c:a2:5f:7e:19:b6:59:c9:e0:90:44:15:29:7e:ca:
29:5e:04:60:ea:34:4b:27:35:f7:58:8b:b1:47:b8:57:df:ce:
6b:4b:14:29:40:5e:2e:e8:6b:97:9f:e9:d3:b6:5f:84:71:cf:
e8:04:0e:b1:f4:fc:e9:ea:5b:f5:01:24:6c:a5:07:3e:58:c0:
b4:62:d2:c6:d5:68:62:13:5a:36:4a:28:68:71:32:7f:c8:87:
c7:47:97:e0:5e:ed:f6:c6:17:cb:6f:7b:8a:50:28:ad:bd:d3:
e6:bf:49:73:86:bc:aa:a3:5d:a8:67:45:06:e9:34:0f:c9:33:
0c:ba:c9:29:38:80:ff:87:f6:92:da:22:f2:3c:3e:cb:04:12:
1d:64:bd:4a:cb:7e:37:8a:c2:97:28:d0:f9:2c:3b:88:25:b3:
9f:52:60:b8:79:51:aa:13:e4:64:94:c9:d5:a3:7d:df:e3:71:
e1:34:53:7b:0b:d8:23:c5:1a:ca:f7:16:55:a7:d9:94:58:67:
32:4f:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:35 2025 by rpki-client