Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
File: 904a13d7-baa1-4bc7-b805-601d0b998680.roa (raw, json)
Hash identifier: jSaqf3udGYIbE+UQPEyUypArxghWXsDthJegbxqk4uU=
Subject key identifier: FE:0A:0D:DA:3C:9C:1F:7B:2D:90:F2:F3:CF:C5:50:AF:1A:21:12:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CD4C9F90C97CD4EB206D4369997AED8669306A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d4:c9:f9:0c:97:cd:4e:b2:06:d4:36:99:97:ae:d8:66:93:06:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0193cc8b9d027c12e47bdad1c68c8e6700970e1b5d85d53f357f036e35e322ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:2b:e8:71:04:d3:1c:1a:65:d9:75:e9:ff:
95:ef:2d:14:f7:ac:02:fb:7a:76:f1:3b:31:ff:20:
dc:8f:09:2a:42:f3:0c:80:03:e5:3b:b8:87:21:45:
30:37:47:e2:e1:8d:cf:3f:4c:43:e4:8b:71:ac:45:
ee:2e:8c:8c:25:6e:3d:a3:90:7a:ae:28:e8:d9:99:
6c:9e:4e:a8:6d:ee:39:10:c2:4a:53:97:78:71:62:
05:b4:aa:a3:63:fd:1f:9e:7b:47:c0:5c:2e:09:25:
57:20:e9:9c:f7:f6:d6:60:d0:19:dd:3f:a6:77:54:
bf:30:c5:59:e8:00:49:88:06:cd:8c:02:06:aa:0c:
50:da:19:46:ca:a8:43:e3:ce:83:e6:a2:68:8d:ef:
c9:f6:9e:94:05:ea:a6:85:9d:a1:8e:18:02:91:9e:
0c:35:b8:95:26:ad:bb:2d:e3:aa:d4:fa:28:fb:1a:
3a:04:08:fb:ff:45:41:78:b4:dc:ba:36:ee:04:5f:
3d:6a:d7:2c:ce:cd:95:1f:e1:35:21:cb:b0:5e:ac:
c5:f0:ba:f3:15:bf:d4:c3:6e:47:7d:10:14:65:eb:
79:42:c8:65:c9:e8:93:1c:a6:e0:8f:b6:60:1e:3a:
5e:c6:4b:9d:ac:77:ee:2f:8d:7e:0e:86:40:07:7b:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:0D:DA:3C:9C:1F:7B:2D:90:F2:F3:CF:C5:50:AF:1A:21:12:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:8000::/40
Signature Algorithm: sha256WithRSAEncryption
13:b9:b6:44:5c:32:05:28:94:1f:56:b7:48:df:aa:9e:b0:b2:
05:2d:23:d0:3f:6a:3a:fb:ba:1b:76:d3:d5:c0:f1:3a:a3:22:
a2:3a:fa:b8:1b:12:51:42:a4:b2:49:e2:89:1d:c4:56:da:ef:
7d:15:2a:4a:41:14:ac:01:9e:01:bc:8b:d3:cc:df:5c:a1:ec:
74:c3:12:bf:dd:a8:c2:8a:7b:d2:a9:a4:4a:f6:ba:50:dc:9e:
d6:25:c5:d8:eb:3e:2d:be:de:7d:c3:1b:fa:11:0b:c5:7f:bc:
84:67:e9:5f:20:d7:4d:3f:41:74:9f:1b:cc:e1:28:44:7f:0f:
59:fe:e5:6a:47:5a:4c:0e:d0:d9:83:aa:e5:3b:16:34:9f:e4:
3f:61:39:ed:09:92:cd:08:92:01:fa:ed:f9:32:81:3e:c3:2a:
1e:bf:d5:6c:7b:9e:2b:3a:1c:31:80:03:a9:cf:8e:08:c2:a8:
dd:5a:12:0b:35:ac:a1:29:e2:eb:cf:cc:e2:ef:e4:9a:31:94:
93:77:a7:08:e1:0d:7b:22:8e:df:43:b6:4e:e9:00:8f:d1:30:
b5:32:da:98:09:85:be:b3:78:e2:41:ac:e9:36:97:55:01:6c:
ca:cd:b1:6b:e3:24:15:d0:31:46:15:60:47:a7:52:33:b0:2d:
25:ab:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:13 2025 by rpki-client