Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
File: 87ec9982-c725-40e5-b829-ff0f06d939c8.roa (raw, json)
Hash identifier: v6Mwuri+HFf2ZTgjacEtbUrnd5T6TXlpbG1K1ZcWuvY=
Subject key identifier: D9:EE:A4:F9:CA:5D:26:F1:6A:67:B0:E6:E4:0C:53:AB:16:E7:E5:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CEAAFEA23FC54659CE6C64288CE2A1BF70E466E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ea:af:ea:23:fc:54:65:9c:e6:c6:42:88:ce:2a:1b:f7:0e:46:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=47836e70061bda14947bab84147fe5836e252298c155eda93c1edf738f9556e4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:25:59:e4:78:c2:f9:69:5a:f4:fa:37:d9:
ba:86:75:7a:0d:a6:24:a1:eb:f4:0e:da:9a:56:b4:
20:de:99:6d:78:1f:25:4d:19:88:c1:d7:80:f6:34:
54:99:f7:a0:46:b2:e5:fc:1d:d7:fe:14:bb:1a:48:
c3:1d:fb:73:93:b9:4f:ca:70:52:ef:23:61:a1:86:
e5:0d:45:aa:d5:10:41:91:5f:c2:cc:89:c1:ec:aa:
1a:a8:d4:8c:02:b8:68:d1:a8:b5:bb:a0:99:89:6e:
00:a0:98:da:d2:34:bc:bc:b6:f4:46:a3:24:f2:0c:
f4:94:27:49:72:5c:18:9f:f1:8d:a7:c1:6e:04:91:
43:1b:fa:b6:01:27:35:aa:fa:ac:b6:ee:e8:3d:fc:
58:26:03:86:1b:2f:70:42:5d:d3:a1:07:80:91:39:
b5:c9:3f:3e:c8:79:8d:a9:a9:60:62:03:01:da:25:
1c:a3:d8:70:3d:ee:27:1b:72:c8:df:bd:6f:35:34:
5c:0f:ee:cf:d5:f8:1f:a9:fb:9c:1a:f0:ee:bb:de:
d8:2c:71:b9:d7:f7:04:7e:51:dd:fb:b3:3b:65:d5:
39:f2:05:58:93:81:13:12:f2:91:3b:73:c6:d7:ea:
34:3c:bf:0e:cb:b9:93:94:95:bc:90:a6:72:03:84:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EE:A4:F9:CA:5D:26:F1:6A:67:B0:E6:E4:0C:53:AB:16:E7:E5:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:9000::/40
Signature Algorithm: sha256WithRSAEncryption
91:30:e0:47:cd:4f:92:2b:39:cc:81:b4:76:80:48:8e:1b:71:
f7:62:8f:b0:90:9a:ce:8e:2a:47:a9:8a:16:ba:06:f5:99:c2:
2f:5b:dc:fd:67:e1:cc:a6:cf:f2:ae:ce:67:13:ae:5a:37:18:
3b:59:c9:7a:39:0f:d8:eb:00:d0:0b:f4:dc:c1:d6:1d:17:37:
18:9e:0e:41:1a:1c:41:92:84:07:5b:1f:3d:97:14:4c:9d:30:
38:a2:f2:9f:8f:37:37:94:06:14:8e:e6:02:9c:dd:6a:05:f4:
5b:36:9b:94:54:91:ab:cc:3c:0c:54:ae:51:df:ac:76:ee:30:
86:31:44:0c:1c:54:4f:71:20:35:ca:ee:bc:8d:30:56:76:88:
66:2e:2a:c7:30:1a:13:b3:ac:80:a0:47:8f:11:2d:c0:17:aa:
09:3e:ed:22:d1:4a:62:39:3e:7d:9b:42:d0:65:c0:b9:d3:38:
5e:96:b5:44:06:0a:91:0c:7c:38:c8:c8:5c:04:15:01:28:a5:
68:3b:19:b1:09:92:02:e9:9b:b6:97:5b:62:e3:7e:40:c1:e8:
6e:55:9a:0c:5a:86:42:8e:27:c9:35:f8:39:db:a4:53:2e:f0:
92:2b:24:18:59:0d:85:ad:5b:c0:4f:f7:38:12:a2:69:ab:cf:
f8:9f:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:25 2025 by rpki-client