Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa
File: 94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa (raw, json)
Hash identifier: SdhcqJSvRGiHqcbKNGT3fv7pXXktRKVPOUWVxMg3lT8=
Subject key identifier: F6:7E:34:89:FC:E6:1B:8C:DC:CE:25:0D:61:97:D2:30:1A:1D:EE:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 374CE02CCD89A769A2347C81F6CD2646C36E150E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4c:e0:2c:cd:89:a7:69:a2:34:7c:81:f6:cd:26:46:c3:6e:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f6f1cfd6bf5f9b17a88fc3fa9edfa95f3e5aadde5de60ff001179d7745d4c5be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:06:10:3b:a6:b4:be:b1:d0:20:14:9a:19:
89:d1:87:88:f0:19:95:a2:47:7a:e5:15:23:00:f4:
69:54:cc:54:90:10:0c:93:99:15:99:86:f9:2f:55:
4e:37:09:73:41:c3:bb:7a:99:e4:3c:66:0d:5f:44:
7a:0e:21:7c:92:bf:76:48:d2:08:d9:90:22:e0:89:
b6:bd:81:e5:15:70:cd:45:a5:8a:77:39:bc:35:77:
af:f6:72:bd:ef:b8:f9:c8:1f:cb:b8:5d:37:d9:ed:
43:10:5c:1c:f8:bc:0d:cf:c2:b8:4c:6e:cb:14:a4:
3a:f4:e1:ec:47:0f:e1:ed:86:a0:6f:0b:6a:fd:ec:
39:41:b3:72:1d:9b:93:e8:5f:4e:8e:6b:09:0d:03:
fa:07:b3:74:9c:8c:a1:ab:55:0f:75:2f:05:90:6b:
2e:55:5f:65:4d:ac:d5:b7:15:ed:e8:b2:c0:f0:93:
78:f6:ce:62:17:ac:40:6a:d5:7f:89:1c:5d:82:a0:
58:b3:88:cd:b0:c6:f5:f4:b5:17:e5:5d:19:42:dd:
c5:e2:38:a5:93:2c:54:d9:94:c9:7b:b5:59:c0:6f:
67:ce:f4:f4:6e:ef:56:31:d5:a1:ed:2f:e4:c8:c1:
e0:f8:65:50:23:af:9f:30:35:bb:a3:82:4d:5a:84:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:34:89:FC:E6:1B:8C:DC:CE:25:0D:61:97:D2:30:1A:1D:EE:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a080::/46
Signature Algorithm: sha256WithRSAEncryption
30:ec:22:1e:6f:04:c0:9e:9e:f6:02:4a:5d:c4:b0:33:3f:fc:
78:0b:41:07:1a:0d:9d:03:ff:6c:b5:e0:6d:e7:bb:91:ce:d5:
0b:1d:a9:68:25:90:1c:bf:97:73:2d:73:08:aa:3e:4f:49:6b:
56:f8:14:cc:f3:d2:54:59:0e:51:30:d2:87:07:7c:04:0b:09:
cb:09:24:49:ba:a3:d1:6e:22:9f:56:c2:35:dc:18:9a:9d:db:
d6:03:d4:e0:88:35:26:42:15:49:96:b6:68:1e:14:c4:e9:32:
92:6e:7e:14:bd:c3:97:14:f7:e9:52:71:67:32:35:63:57:7b:
df:bf:82:1a:b3:d2:3e:41:d5:31:de:ab:45:38:d9:c8:8c:b5:
0d:ca:b4:cb:0b:37:62:72:69:69:59:d9:69:c8:54:e9:cb:7a:
32:e0:38:06:18:17:5a:44:6c:db:ae:ee:41:d1:75:cc:9d:10:
c7:c0:20:84:05:67:9b:6a:0e:40:5f:29:15:65:65:eb:15:d0:
79:d1:17:cc:b7:c3:73:08:ab:9d:cf:23:1f:fa:b9:03:e0:bc:
02:29:5b:bb:42:48:28:2d:9a:61:1d:53:19:4f:6e:16:a5:20:
ca:b7:43:8c:a6:ef:80:a5:e1:1b:94:f6:15:8c:e0:89:af:be:
4a:98:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:39 2025 by rpki-client