Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa
File: 81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa (raw, json)
Hash identifier: Fo0eI5YemrFKSZiIi+ERu5R76/Q7aBOpRCsOD+kQAP4=
Subject key identifier: 14:C0:62:4F:01:5D:0D:01:03:15:79:77:2F:66:08:40:2B:5B:45:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BF189C25323109BFD0B4A4B077F1387134FE7A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f1:89:c2:53:23:10:9b:fd:0b:4a:4b:07:7f:13:87:13:4f:e7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=da0c3234e054c6220dd39a00b9a4d4aadf9967690b5305c2382cfff18a78d015, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:68:90:fe:0e:b5:24:62:ae:69:e9:d0:db:
f6:bd:42:47:13:0f:dc:17:40:ea:e8:55:72:1e:c4:
72:24:2c:04:7f:56:33:5e:45:bd:0f:b6:0b:81:16:
b7:51:0d:39:50:23:01:05:50:68:3d:3d:6d:5f:11:
d5:7f:79:fd:bd:12:71:e8:de:a4:88:c5:4e:a8:60:
ce:a3:f4:5e:b7:5c:be:2f:9f:7b:71:d1:bf:05:d8:
7a:37:8b:e9:11:d2:7e:7f:44:14:f6:90:80:49:e4:
1a:82:c3:46:2f:67:2e:59:a0:69:b1:af:c2:78:64:
62:2b:6a:b3:ea:bf:6f:92:ab:64:c9:b1:ec:46:87:
c4:ec:1e:14:0d:75:8c:10:de:c1:5f:ec:9c:b9:45:
cb:23:64:c6:b1:65:12:b9:5a:19:14:24:fc:7c:4a:
ff:5b:e2:d5:64:ab:e6:67:87:19:8a:5e:9f:f9:82:
6f:88:56:6d:c2:a4:c5:6a:b2:71:e9:9c:44:a7:40:
89:12:d6:f7:26:b6:49:e1:58:18:27:cb:26:9c:09:
6a:4e:03:a6:c7:c9:b9:af:49:b0:1b:7d:b4:ec:73:
d8:3c:70:5d:66:03:68:b4:50:f5:fa:0b:25:01:40:
01:ac:73:4c:e2:4d:24:c6:3c:91:0e:30:a6:bf:a9:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:62:4F:01:5D:0D:01:03:15:79:77:2F:66:08:40:2B:5B:45:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b000::/40
Signature Algorithm: sha256WithRSAEncryption
af:8f:8f:34:b9:6d:ec:52:29:3b:a6:62:c6:15:22:76:13:70:
eb:98:a6:03:61:7f:ba:ee:0a:5b:fd:13:da:a3:04:76:de:cf:
91:d2:5e:19:af:fd:47:7a:43:1b:dd:f1:63:68:f8:6c:ca:5d:
cf:db:a1:e0:c9:5f:9c:26:c7:0c:5c:17:a9:59:1a:2a:e4:b5:
81:51:ec:06:c7:28:ac:d8:05:7f:de:19:42:fa:b6:e8:6d:a1:
43:12:32:01:0d:7a:ab:5d:10:99:6b:2f:7d:e4:ff:ee:66:15:
8a:29:ff:24:dc:68:7a:91:16:c1:68:95:ed:9d:74:ed:cf:fc:
9c:57:16:64:75:54:03:e9:7c:eb:c2:23:98:76:ac:de:3a:c0:
bf:a3:a4:53:d0:86:d0:45:c2:50:92:71:b1:09:bd:ad:ce:c1:
23:3a:f4:8d:f4:80:df:3f:54:85:7d:2e:7b:49:f2:82:a7:5d:
6f:b3:ad:a9:77:c9:c6:cd:bf:ea:e2:e4:25:e5:1d:0b:6c:2d:
aa:76:9b:25:31:5d:64:68:a9:07:32:25:14:5f:c5:99:94:78:
72:3a:6e:01:7c:b4:02:04:3b:c1:e7:b6:4e:64:ed:94:e1:2a:
01:c2:8c:55:09:af:f0:03:f1:7c:cc:f7:a8:b5:cc:42:35:c1:
c5:42:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:01 2025 by rpki-client