Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
File: 86433272-8233-4231-82ff-92246d0a41a5.roa (raw, json)
Hash identifier: sxOfMrbaUxyYPwRBsIK7nxVqRYzGnDaaD+OMQOC/t5E=
Subject key identifier: 2C:66:BC:34:23:2B:8F:6D:87:D2:E6:D5:BB:A6:C0:9D:C9:08:47:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 069D769FD590443E4C6C4943D29B880DA1DD65F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:40c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9d:76:9f:d5:90:44:3e:4c:6c:49:43:d2:9b:88:0d:a1:dd:65:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=38ee4d82e6cce069cb641391e6b035ad8981e9e26829e44400f79e8923d5a455, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:7a:61:5c:d0:c4:fe:fb:77:1e:62:0c:c3:
d8:43:20:bb:c9:b5:1c:a0:96:84:25:09:77:5d:2f:
76:b7:a7:1c:c2:ad:fa:cb:7d:f4:30:54:20:8b:ce:
da:1b:bd:6d:78:ff:c9:44:66:e0:ad:9f:6d:82:81:
6d:3a:a1:a4:5a:85:a4:78:24:2a:48:e8:5c:51:38:
ed:ba:e9:62:71:17:27:2f:ff:9e:f2:97:d4:41:f2:
b5:01:f4:d7:19:88:72:a1:b5:29:80:64:43:6e:56:
83:c7:3b:a9:11:be:69:bb:8c:a5:49:ed:49:46:6b:
e9:32:e0:fe:a3:cd:cb:39:16:5f:f5:16:12:4a:af:
a8:82:5c:dc:a6:02:df:63:6a:a2:52:bf:7a:25:04:
90:a7:da:64:e8:e9:1d:e0:2c:81:a6:fb:60:88:bc:
14:25:40:cd:0e:a7:e9:7f:14:44:ae:3f:be:0a:af:
a7:24:9e:6b:b3:c8:2e:b8:3a:d7:74:42:ce:50:83:
b8:92:52:d9:44:3a:f4:c7:96:a3:e9:65:73:84:06:
0a:17:a2:9b:b8:51:95:cb:20:c1:8c:8b:c1:7f:dd:
ce:c2:5f:9b:ce:23:31:92:e4:be:83:01:41:a2:fa:
a2:99:c3:ae:6b:74:54:08:45:92:c1:a4:47:1f:cf:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:66:BC:34:23:2B:8F:6D:87:D2:E6:D5:BB:A6:C0:9D:C9:08:47:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:24:da:33:36:7a:a9:66:ec:88:6d:54:b7:3e:74:d1:03:5f:
40:4e:fc:f2:f7:e3:97:31:77:f3:44:0e:27:ec:a6:94:30:d5:
24:5b:cf:17:b2:b3:c3:b6:07:d7:7f:6a:87:a3:76:70:82:c3:
fa:4e:0d:25:16:a0:11:ec:39:0a:db:a2:b7:04:63:29:8d:68:
3d:28:12:9d:2c:da:58:09:93:8e:86:8e:5a:a7:8e:60:e5:93:
65:dc:70:e1:c3:e6:b7:f5:fb:99:e2:6a:c4:06:22:b1:12:8a:
05:08:9a:21:77:d7:bd:30:ed:33:83:23:df:9e:f6:d3:fb:b3:
9f:71:98:94:15:f5:3a:97:ae:fa:4d:ce:74:fc:52:64:c0:ac:
8d:c1:c1:72:08:af:9f:7f:d9:d7:30:65:aa:e3:3b:7c:92:4e:
e7:4c:3d:a2:44:40:c7:d7:14:74:5d:4a:ca:4c:bc:ff:63:a3:
bd:d1:8b:2b:4e:35:5d:74:5d:e6:2f:40:a6:7b:b0:23:4d:f3:
a0:ae:32:dd:d9:40:03:06:cb:08:db:81:59:85:96:36:c8:3b:
e1:59:a6:17:46:b4:28:ef:bf:2a:d6:f7:85:99:03:46:ed:9b:
af:2d:20:22:6d:07:37:e5:b4:df:a1:e2:fe:2d:cc:3e:fa:c5:
cc:f7:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:13 2025 by rpki-client