Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
File: 92652652-28d6-49c1-8ea6-f5079f374345.roa (raw, json)
Hash identifier: aC2SJxq4Drgtk0T7ajuVuaivV7R/bA2jTT+Y2sfs+nk=
Subject key identifier: 96:42:96:D3:97:C4:3B:93:7E:87:BA:D3:0A:2B:E8:91:52:78:AD:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C7623C128C062462BCBACABFF53AF920E61FF0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:76:23:c1:28:c0:62:46:2b:cb:ac:ab:ff:53:af:92:0e:61:ff:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1b93adafb49a4a12fc7b46b86ab63b643b68f75dff25eaf57e80423cef8c3766, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:0d:ca:45:98:7e:b5:9f:e9:1c:e4:36:0e:
23:84:42:a9:a4:8e:a1:6a:44:5a:c0:c6:8f:de:c3:
06:da:a3:f3:02:aa:8a:1d:49:40:b9:c1:ef:6b:66:
1c:ad:c1:1c:74:a8:4e:de:28:c4:b6:84:ed:50:a4:
ee:c2:7a:16:2e:1c:58:64:9d:b7:5d:e8:0d:c4:74:
68:c4:99:02:c5:fa:41:37:0f:80:7f:e9:30:21:9a:
7a:e3:a9:74:54:a8:7a:aa:d2:50:75:cf:4c:5b:59:
cb:65:2f:e4:64:ce:41:14:95:e9:a0:33:67:53:12:
a0:92:c6:ed:bb:c9:7d:e2:08:d7:4f:41:7d:6f:ce:
24:70:8e:2e:19:50:ae:eb:bd:ae:44:9d:bf:5c:67:
27:d6:d9:ed:b4:e2:66:31:2c:33:7d:36:d2:fa:1f:
9d:2a:64:e2:11:0c:aa:2d:34:53:db:cc:42:03:3e:
87:f8:a5:43:ce:11:2c:00:7f:54:bd:2e:c7:d9:f3:
2c:6a:32:d3:55:0a:65:1d:51:a7:33:69:0d:ff:13:
af:96:4c:1a:c6:eb:d5:86:64:2b:77:d2:37:1a:e5:
d9:85:cb:62:75:20:6d:51:00:ed:a9:52:c0:5d:00:
6d:10:ca:61:8b:8a:77:19:f5:bd:8a:38:46:e3:bc:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:96:D3:97:C4:3B:93:7E:87:BA:D3:0A:2B:E8:91:52:78:AD:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4060::/48
Signature Algorithm: sha256WithRSAEncryption
16:08:e0:e8:9c:bd:e5:c9:73:69:1c:63:00:6f:af:44:5c:b0:
ed:8f:74:59:39:4b:66:fc:83:66:16:30:78:c5:dc:9d:5a:8a:
dd:68:72:3f:49:d2:99:00:b3:c3:68:3f:b0:89:ec:80:e1:2f:
8b:5e:d4:f2:4b:26:e4:87:4c:c1:a8:88:b5:59:55:94:8c:6b:
22:57:30:67:89:82:16:e1:04:da:9e:1b:96:06:9f:2d:1a:43:
6c:a7:f6:aa:55:3e:d0:54:42:4d:5d:7e:cc:0c:c8:71:72:ca:
bf:94:7b:da:f7:15:3f:3c:2e:56:bd:44:e1:b3:c1:fa:21:f1:
f4:88:b1:62:da:3b:63:94:15:47:00:a0:3a:4e:33:d7:de:7d:
c9:c5:9a:92:40:72:11:a5:19:eb:c0:25:5a:20:54:3a:7c:9a:
be:ab:d6:fd:92:58:af:13:cb:f5:5a:40:3c:d1:27:ef:8c:79:
d2:fb:43:a2:09:0d:5d:07:e9:00:8e:2a:bc:14:8f:bd:42:45:
8c:80:fd:30:f4:09:72:17:ce:34:4c:e9:0b:63:d3:74:92:a1:
fe:95:46:7f:eb:e2:14:05:7d:d4:91:8f:43:c3:e0:2f:cd:d1:
73:75:49:99:38:15:38:c3:9b:74:cd:23:ff:b6:22:93:21:43:
5c:69:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:06 2025 by rpki-client