Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
File: 9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa (raw, json)
Hash identifier: 4dr1OHXNLtvzWIFkL2VyZmVRIva13iOVeTeFwjPI0nU=
Subject key identifier: 4A:E8:79:81:E7:6C:5B:BE:D7:BE:2F:0F:1F:E6:F9:D2:C8:70:9C:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 684D195B4FC6C3A4E1C5D61314D972FCDB6BEA99
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4d:19:5b:4f:c6:c3:a4:e1:c5:d6:13:14:d9:72:fc:db:6b:ea:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=dd4a8296e8c919c1b8cf43703017ea591a05f32edf074442a8608a632cac2231, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:6e:66:b7:b0:3e:04:7f:c5:ad:bd:19:e9:
c7:2c:e2:2d:d6:08:5d:d2:9b:d5:a7:45:84:d5:9e:
d2:1c:6c:6f:03:fb:7c:94:88:8e:04:0f:30:13:e0:
f6:88:0c:0d:d5:32:65:bf:00:cf:67:b1:6e:a0:62:
c8:0f:58:ae:23:dc:51:c2:8f:6f:ec:7f:47:92:10:
3f:82:d3:b0:94:4f:32:41:86:fa:c6:df:7f:dd:a1:
cc:3f:fa:b2:a2:40:e1:48:3c:8d:35:bc:5e:21:ff:
0f:5f:4e:8f:b0:2c:3b:17:b9:74:74:fc:7f:df:7d:
ab:a2:ce:73:b9:4b:bd:7b:da:96:e2:88:c8:a9:35:
6d:c0:b2:24:b6:9f:ee:e9:7b:03:71:4e:39:24:9b:
3d:fb:ad:33:5d:82:93:b7:aa:71:6f:ea:f6:bb:e8:
7e:74:9c:8c:0b:a0:c4:e2:f7:1e:ce:21:90:43:51:
4f:be:68:6a:02:55:8d:50:8b:9e:10:46:5b:30:c8:
14:ff:21:2d:c9:a1:97:7c:a4:4e:58:0b:50:0e:96:
08:04:79:b6:a0:a8:b9:83:d1:88:a1:64:16:2f:28:
2a:3d:e5:b8:34:0a:95:2f:35:9d:d2:6b:4b:6f:89:
ab:5d:18:29:95:b3:e9:66:1e:1f:ab:4b:76:20:4e:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:79:81:E7:6C:5B:BE:D7:BE:2F:0F:1F:E6:F9:D2:C8:70:9C:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070::/32
Signature Algorithm: sha256WithRSAEncryption
c5:36:5c:00:6a:18:9d:62:ba:0b:c0:a8:83:96:ad:1e:fa:a6:
b3:8c:0f:93:60:c7:60:a1:3d:15:6a:f0:57:97:0c:e6:da:fb:
bf:3c:04:8d:ad:c0:61:10:c1:72:3b:d0:02:84:4f:7a:78:2d:
85:d8:19:30:b2:c0:dd:2a:e1:51:20:09:46:2e:4f:c9:ba:0d:
87:58:63:9f:99:61:30:b8:ce:e2:b5:21:07:7c:8d:fe:7b:8f:
b0:c0:58:66:3b:07:0f:ba:fa:ac:2c:bb:e2:b4:5e:a8:d2:06:
9d:b5:80:c4:fb:85:2a:b7:3e:a4:a9:77:98:0f:fd:1d:62:1b:
16:04:cd:7e:4d:a1:1e:ee:ec:a6:60:f9:c7:db:64:a0:17:44:
33:e0:ab:08:b7:5e:a8:3e:71:d7:a9:d5:7b:24:6a:f6:ca:95:
8c:e6:5a:d6:bd:cc:81:5e:97:69:0b:4c:69:5b:dc:f5:92:70:
93:9b:2d:ed:dc:57:8b:09:91:17:14:09:47:0c:cd:77:53:fe:
aa:f6:b1:df:e9:97:d1:4b:2b:1e:02:63:e5:75:e4:62:f3:c1:
8a:6c:9f:fb:1c:c8:7d:31:26:71:7b:d7:d0:39:27:6f:d8:43:
0b:07:41:33:e3:3a:c3:0e:03:08:59:fb:ed:a4:63:86:82:de:
8c:04:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:43 2025 by rpki-client