Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
File: 90bd72ba-b30d-4433-a47e-e0543a4ea451.roa (raw, json)
Hash identifier: ATm0TJLxAlbTud/Dk55tdy8zoM+J+RMmnjpnB50uA1o=
Subject key identifier: F5:7C:5E:52:E7:F1:37:DC:15:8E:3B:49:A9:E1:7D:22:9B:5C:BD:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EC9F7909549A74D6ACE075DA3A1686E37971E7E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c9:f7:90:95:49:a7:4d:6a:ce:07:5d:a3:a1:68:6e:37:97:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=1d89c3edb9dc275354f51c3dc73fad105bdd8534de445bbdf8943ba1bb075006, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:72:2a:18:d8:92:91:34:79:97:b0:09:40:
7e:53:dc:86:c5:c8:9b:d4:aa:65:45:4c:93:93:b1:
ed:97:11:a3:ea:d0:39:83:e3:9d:58:27:d2:66:76:
c1:61:b7:49:b8:72:7f:bb:73:f6:a0:80:78:a0:a0:
6b:29:88:7b:5a:d9:d3:4f:e6:64:6f:ec:ec:d0:ac:
ca:ce:86:5f:92:63:9d:21:69:11:ec:bf:b1:57:df:
38:0f:60:3d:0b:fa:08:b0:e6:d6:03:a3:bf:c7:1a:
4f:11:0c:ef:b0:e4:c0:08:bd:72:c1:54:c9:38:19:
bf:93:f3:0c:8a:f6:2d:46:08:43:02:09:00:a5:4b:
f7:de:40:68:c6:e3:ad:d1:b3:42:84:97:10:2b:00:
9c:f3:e6:90:a5:1a:20:88:a4:ad:e9:c7:25:4c:20:
ab:4c:0d:42:2f:40:51:f0:15:04:0a:40:f8:d6:ee:
32:c0:92:69:a2:4b:9b:24:34:93:82:ff:63:16:dd:
72:5b:15:c3:dc:ca:cd:43:25:fa:a8:7a:fc:82:9a:
05:03:25:db:0a:97:a2:67:31:1b:60:79:9e:24:70:
c9:57:e5:90:36:eb:17:52:96:e5:d1:0e:27:53:58:
7e:7e:8f:45:1d:dc:2b:e3:da:cc:0c:6a:aa:ec:1d:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:5E:52:E7:F1:37:DC:15:8E:3B:49:A9:E1:7D:22:9B:5C:BD:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:e000::/40
Signature Algorithm: sha256WithRSAEncryption
48:9b:44:5d:82:19:72:25:8a:00:45:45:af:93:52:98:28:8c:
1f:de:7c:67:7e:b5:01:04:e7:70:e4:cc:d0:32:7b:de:15:7c:
43:3b:1e:c3:f4:74:50:86:17:d8:c6:53:fa:c4:c0:e1:10:08:
91:d9:52:4b:1a:e6:48:f0:3e:0c:24:72:d3:9c:6b:64:f6:53:
64:c1:96:45:b6:0d:b0:1a:f2:c1:bf:37:8b:13:e7:28:9b:6f:
c1:72:f9:dd:6c:f2:ee:88:7e:a9:12:16:9b:fc:29:b5:e4:46:
7d:3d:ad:69:ba:5d:e9:12:91:74:a2:ef:1a:d1:0c:a9:22:7c:
71:a1:be:f3:30:a3:6c:69:8f:f0:02:23:bf:fe:22:1c:2c:f2:
82:d4:78:4d:33:f6:e4:28:58:23:c4:f9:8c:af:12:d8:ea:d3:
4a:ab:62:cf:3c:75:9f:9b:e3:18:48:59:10:bc:5b:e6:87:a2:
9c:9b:69:c7:ca:45:df:44:df:8f:4b:9b:57:91:f7:8d:47:d0:
0a:f8:7b:c9:85:4d:ff:ee:f2:87:87:64:17:07:e7:dc:8e:cc:
64:51:79:84:8c:c8:23:33:74:4d:10:b7:89:61:77:36:1b:06:
17:01:d2:cb:61:ee:17:86:63:de:cc:35:f5:21:c2:01:bf:04:
3c:ac:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:27 2025 by rpki-client