Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json)
Hash identifier: 76gV4YVLYyu1u/1gQALqroykgd586vFVCLV7lwzMqPs=
Subject key identifier: CF:D7:64:2F:D7:69:4A:39:88:CE:EC:15:0E:B0:22:D7:53:53:56:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0382C15FD0CFCF0847ED64D1EEB8E9A436336A49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:82:c1:5f:d0:cf:cf:08:47:ed:64:d1:ee:b8:e9:a4:36:33:6a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8612b1e5deace25b3ab49afdc2e7525c074b4f6e0b5d31b600adb1d5dfe65172, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:1d:08:b2:91:08:58:6c:64:fe:86:91:49:
33:81:3c:6e:be:9c:6e:cb:fc:15:64:30:db:bc:0d:
42:12:b4:79:ef:59:1b:66:5b:ff:c6:57:49:ea:f8:
16:d8:bf:22:11:0f:54:1c:09:f2:d3:0b:55:23:82:
c4:b5:68:f1:50:82:5c:6d:e6:44:45:3d:d9:4b:e7:
9b:7d:5a:ce:9c:4a:90:f4:76:7b:cd:f2:d3:dd:b1:
30:5a:b5:6b:78:bc:71:76:33:f6:a3:1d:7e:c3:2b:
73:2a:93:3d:3c:f3:16:0d:03:a4:2d:c2:92:e1:f0:
46:28:d1:d5:6e:bb:86:47:6d:11:5e:f2:55:87:53:
02:31:cb:65:20:4b:2d:46:f7:90:01:f1:15:d2:7c:
23:4b:11:db:f4:2d:72:ce:93:bf:a7:80:b2:6f:75:
11:28:31:35:06:ce:8b:c6:64:1f:1d:ac:7d:b5:66:
57:1c:ad:79:cb:67:6e:93:2b:b9:5c:b9:ab:54:a7:
53:08:74:08:17:41:a0:7c:8a:07:5d:67:81:59:87:
23:28:ce:de:6d:ee:7f:61:62:0d:f9:e4:62:23:93:
57:73:21:21:36:8f:53:3e:38:d1:45:aa:ef:7d:d3:
14:47:b8:12:93:ae:05:9e:8e:86:6d:83:b2:b3:2b:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:64:2F:D7:69:4A:39:88:CE:EC:15:0E:B0:22:D7:53:53:56:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:c4:31:37:2e:06:cc:4a:09:56:fc:91:bf:8d:f7:97:4d:60:
d3:9c:44:b9:58:7b:b3:27:6a:8f:4b:3a:43:3d:fe:47:14:1a:
9b:34:b0:18:62:98:c3:b5:d4:26:9e:f3:84:ad:c2:f4:75:b7:
cd:48:c6:62:22:36:a5:f5:bb:c5:28:4a:b3:2f:80:73:5b:97:
19:07:70:0b:64:d5:33:d9:6d:68:23:b6:bc:a8:c6:bf:bc:1b:
ad:c4:b1:44:81:4c:13:d1:5e:03:c6:40:d2:c7:19:7f:6f:43:
73:d0:c3:17:a4:23:41:58:c5:4d:d3:20:17:cf:08:15:0e:95:
1c:42:a0:3b:be:9b:4c:71:83:e2:f5:69:b3:1e:8b:aa:87:f9:
c7:f4:cb:08:e1:01:92:29:d2:30:e0:5a:c6:55:c2:b3:ee:f8:
a5:05:d8:85:77:0c:4e:37:73:9c:2c:12:6c:7f:15:85:d2:35:
65:02:88:37:8b:80:68:69:4f:b6:e3:7e:48:6a:11:76:9c:95:
2c:71:8c:95:e4:14:df:e6:60:a2:96:1b:79:99:a2:8e:96:ac:
24:0c:a6:3f:c9:18:39:25:6d:c4:42:c6:2b:28:4e:b6:c0:18:
d7:02:a1:4d:e5:2f:6d:9b:17:b3:91:4e:db:21:66:1b:0a:ac:
53:0d:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:48 2025 by rpki-client