Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File: 87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier: 20y0ikObCvha7j9u4SLr1WANM536BFA9ZOSeLAS+OqQ=
Subject key identifier: F9:19:9B:F9:26:3C:C3:7C:9E:4A:53:C8:23:D1:B9:C5:51:00:E3:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 101100110B9F80854285012032B545A56E09AFAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:11:00:11:0b:9f:80:85:42:85:01:20:32:b5:45:a5:6e:09:af:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=7090e7676f8eaae625bd694e94bbcaf224dddf307e57830fc7d429fae9578d16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:b3:5b:e5:e0:81:21:4d:a0:1f:a6:2b:56:
24:da:e7:7d:f4:ea:fe:4b:bc:5d:83:cb:34:15:96:
fd:45:88:6b:fc:fc:0b:48:eb:09:9b:35:d1:14:50:
41:d1:16:a7:93:8b:ce:48:d3:b0:f6:ef:57:e9:a7:
1a:9a:07:12:06:12:ff:7b:52:90:2d:0a:fd:1e:0d:
4b:6e:4b:80:d4:f5:5f:37:28:86:64:c1:f0:cf:5b:
7b:30:83:5c:5f:29:be:1e:65:85:8f:9c:3b:34:9a:
19:38:2d:60:03:b5:19:48:62:e4:02:fa:43:c6:9b:
5a:1f:1a:23:80:4d:dc:5c:51:0d:22:5c:8c:dc:cd:
69:69:62:64:86:1d:27:30:6c:d5:28:68:b8:b8:c6:
80:a7:91:92:5e:5c:25:77:c2:d8:d1:11:f0:89:4e:
69:28:a3:04:49:92:ef:24:4b:96:17:d2:a8:82:f5:
7d:8c:3d:aa:59:21:ce:bc:77:38:6c:87:ab:7f:90:
f1:f8:e9:ae:63:e9:e6:5b:49:d7:60:10:ea:75:eb:
d6:e4:e6:be:f6:b2:b6:28:a3:9e:e8:04:64:d7:fb:
82:47:25:7f:31:7a:df:1b:82:dc:03:bb:81:73:3a:
3c:a5:11:b4:67:f2:33:5d:33:4d:97:20:46:86:22:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:9B:F9:26:3C:C3:7C:9E:4A:53:C8:23:D1:B9:C5:51:00:E3:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:05:e6:da:61:24:b4:96:1b:a8:88:b9:48:1b:21:0e:d3:31:
f2:e5:51:ae:c1:dd:50:4e:e2:8d:a8:e3:33:67:84:43:43:bb:
de:1f:04:02:8f:48:1a:cf:3d:a7:17:05:3f:54:12:e3:c1:61:
22:fb:97:a8:94:e8:80:37:a2:9d:ac:b4:83:b2:8c:6e:d7:4b:
b3:0c:8e:a5:c3:82:b1:32:6d:7c:c9:37:04:e6:b1:a1:6b:fc:
c9:c0:d8:66:fe:70:56:66:33:7e:96:80:a4:72:da:db:d4:32:
3c:da:8d:c6:7a:8d:23:4e:cf:cd:e2:67:44:49:be:f0:41:80:
91:30:7e:54:6b:d7:dd:7d:d7:03:82:1d:d6:d1:90:99:c2:7a:
48:12:e6:99:3d:e0:fc:68:b9:9a:d8:fc:ef:a0:eb:d1:19:a9:
f5:8a:c1:40:6f:78:92:80:1e:5a:87:08:6b:70:0e:9c:f9:e6:
cc:59:45:da:06:5d:dd:16:70:88:4e:e5:56:bc:11:17:f7:55:
44:27:05:b2:ae:5e:b1:76:dd:39:58:b7:48:eb:6d:52:26:b9:
02:b6:16:88:21:d9:2b:d2:25:39:15:13:25:4f:63:d3:51:27:
65:bf:10:be:dc:67:69:65:01:fd:23:f1:d3:c1:95:0a:f6:db:
9d:6d:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:55 2025 by rpki-client