Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
File: 9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa (raw, json)
Hash identifier: HcRwW/t2bNsTSg2mdfWrJdvja8KqZ6M30BDOp9MhS+A=
Subject key identifier: 7F:11:49:2D:0F:40:35:4C:9B:23:CC:34:E9:2F:33:5E:3F:03:DB:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4EF5942FD58E559A587E523794B5E6DAEC1C5447
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f5:94:2f:d5:8e:55:9a:58:7e:52:37:94:b5:e6:da:ec:1c:54:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d6e728c8fdcc30b049e72020d2460a176184ac63d5f357db4ec5a2eb5a374f73, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:6a:f2:10:8c:33:16:4d:37:39:14:83:6e:
10:52:3d:4e:22:83:00:88:a5:2c:b6:09:71:b6:81:
ce:9c:96:03:f1:15:68:a2:ef:40:63:73:24:1e:a8:
22:49:50:ce:4f:94:ca:2b:f8:8f:c5:7e:82:41:24:
c2:26:65:8d:9a:a7:e6:fe:7d:20:87:74:cb:be:98:
2d:fa:07:30:9f:60:7e:22:82:de:13:80:b5:0d:88:
b8:4d:a5:bd:03:cc:65:2f:52:ab:d9:aa:6a:cf:3f:
03:3e:18:f6:43:59:0d:24:f8:75:99:b0:93:04:5f:
88:8c:06:7e:e4:39:1f:40:72:3b:12:08:82:80:c5:
fb:6b:31:21:03:20:31:41:14:ad:e3:66:b7:4b:60:
1b:98:df:09:09:a4:b6:c9:84:7c:cd:13:fe:8b:e4:
02:af:f7:2e:b5:50:8d:9d:27:ac:70:4c:da:4b:44:
43:7f:90:5c:b2:19:62:a3:ed:e9:83:14:59:04:55:
7c:0b:71:23:6a:b9:46:df:4b:d0:8f:a2:7f:28:72:
54:aa:44:35:b6:f2:2a:00:5e:81:3f:bc:df:5c:63:
90:a2:10:11:17:bf:96:c5:2b:ba:4e:cf:5f:77:a7:
b9:02:64:cc:a2:ca:09:38:10:ed:f0:7b:0c:d7:a0:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:49:2D:0F:40:35:4C:9B:23:CC:34:E9:2F:33:5E:3F:03:DB:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9040::/48
Signature Algorithm: sha256WithRSAEncryption
c7:57:44:49:7a:36:e6:95:2a:47:cd:17:66:c0:e3:d8:64:81:
76:56:29:69:5d:6c:2f:d1:92:21:4f:92:bd:63:3b:93:f4:d5:
fd:2f:24:9d:f4:e9:f5:2c:e4:c2:a0:28:fd:3d:a4:d3:c2:a7:
33:20:9b:e7:8b:89:94:00:d1:e0:c8:dd:3c:dc:cb:75:4d:2f:
db:17:62:9b:80:90:73:e3:95:1f:17:44:b1:28:1f:3a:ba:13:
44:c1:ed:d0:da:18:97:d0:66:1e:a5:d7:58:15:49:3d:2a:68:
f8:78:bb:8e:c1:a6:45:71:a6:80:21:22:0e:1c:83:2e:c7:6d:
2f:4c:3f:d7:0d:39:e6:6b:5a:4b:73:a1:1c:67:94:d5:58:e9:
3f:89:81:47:a9:52:4d:a6:91:5c:b3:50:a7:ba:3d:39:e1:e9:
b5:40:89:11:33:3d:2d:43:05:cd:1e:0f:00:60:0d:5d:17:02:
7d:26:4e:0f:78:bd:58:ec:9a:d2:2a:cf:64:85:28:7b:84:11:
ed:1a:3d:68:73:30:8d:5d:38:f9:4b:8e:d3:fe:09:80:b8:33:
58:05:82:be:5e:d8:43:ed:3b:c7:25:6b:40:13:6c:6e:87:fe:
4b:d7:51:25:8f:34:98:1f:2c:54:96:3c:6b:b0:39:4a:6a:a2:
d7:05:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:48 2025 by rpki-client