Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
File: 94b69c02-a117-42df-89a0-b463fa809f2d.roa (raw, json)
Hash identifier: LPs0nUTXOLV7GheGZ/eYn6yRMXpNF0G890Ko5jGGHxI=
Subject key identifier: 73:15:08:EC:F3:CE:99:40:D1:C8:01:BB:0C:BA:FB:EC:61:F6:5C:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06A8F202D98AE922B90E05C254BB192C3C6CA034
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a8:f2:02:d9:8a:e9:22:b9:0e:05:c2:54:bb:19:2c:3c:6c:a0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=813154cbdc067906bd80caa35ab5512dedef60b9d3ebc0368d135a716848a978, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:1a:7a:ac:6b:3b:f7:58:47:7e:6e:76:9a:
fe:85:75:e5:4e:f7:9b:27:1b:80:b7:3d:30:75:6f:
d6:d8:b4:e8:fc:b1:13:4e:70:af:0b:e3:ae:0b:a3:
9a:84:85:59:eb:48:4b:96:8c:bb:09:fc:0a:ae:6b:
96:18:2d:34:25:2d:9f:be:ac:94:e6:d8:71:cc:da:
65:d8:37:b8:7a:b0:3c:cf:dc:df:7b:d6:13:a4:33:
ab:3a:0d:c6:ab:54:f5:9d:06:5c:41:2a:17:17:b7:
2b:0d:2f:ed:e8:4c:e9:ff:b5:7c:e8:d5:6a:97:8d:
d3:96:2d:7f:b9:53:cf:48:28:5c:0c:f2:39:b0:cc:
16:1a:1f:9a:f2:87:b6:73:8e:0e:5c:81:4c:05:ae:
a6:0e:2a:ed:32:e0:2d:0d:6c:ce:5d:af:ea:83:1e:
ce:36:aa:bc:47:5f:fe:f8:d6:81:2f:65:4f:42:b6:
d1:cc:ec:7d:c9:6b:8c:20:a0:94:06:8b:d9:fd:ea:
eb:7b:83:3b:c5:04:94:f4:99:e9:19:70:bd:4d:56:
ac:5e:59:d9:e6:1f:a6:33:8e:ce:d6:74:eb:bf:77:
ad:d5:10:e7:26:f4:88:0e:b1:e9:b0:1c:dc:63:86:
17:cc:62:65:6e:c6:36:0b:68:17:87:0d:30:03:4a:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:08:EC:F3:CE:99:40:D1:C8:01:BB:0C:BA:FB:EC:61:F6:5C:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:2000::/40
Signature Algorithm: sha256WithRSAEncryption
39:94:5e:21:64:a9:30:8c:c6:9e:2e:1a:a5:c3:dc:8b:4d:41:
14:66:27:88:6a:d2:f4:b5:72:73:ba:8c:4e:4a:81:f8:c3:a1:
1d:68:74:bb:c3:b7:3e:37:3c:aa:75:06:5d:36:7f:01:50:84:
c8:07:56:7c:a9:d3:ef:3d:1b:2f:78:37:ea:12:91:a9:28:62:
2e:90:c5:d7:47:75:59:35:7d:d3:c5:0f:38:1a:fb:61:fe:ec:
0f:06:12:98:d6:f0:31:11:0f:54:b1:5b:03:32:d8:4a:d1:f6:
18:a5:12:5e:2d:d8:5f:7c:5d:60:9a:9c:0e:54:06:c2:17:6c:
dc:51:c5:81:35:23:7d:82:67:8d:62:65:d8:c2:88:c3:87:bf:
90:70:4e:0c:d6:29:7f:07:b3:cc:b1:85:69:75:2b:b2:63:79:
06:1e:a5:b5:1d:54:8d:2b:32:19:e8:85:d3:dd:6b:69:d0:f2:
b3:29:26:83:2b:78:db:c1:7a:38:bd:8a:93:b9:ee:f7:fe:30:
ce:94:af:7c:00:c0:bd:7b:98:65:7e:c8:b2:bb:41:ae:d6:57:
13:a9:7d:ae:65:95:63:d7:5a:04:54:56:c5:d0:93:e1:72:e8:
6d:11:6e:aa:b5:6b:de:0d:5a:9e:d5:52:49:8b:91:a5:f3:af:
24:a5:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:59 2025 by rpki-client