Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: COz/jdND1DLKDYjEETbRNGm1pHRt9hnDBNusfwwF4yI=
Subject key identifier: CD:CA:2B:1C:B5:A3:A5:D4:33:AE:77:74:D7:0F:D2:77:BE:1B:46:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01797A6B6C2285C89F438D0AE3BCC62F27DA4273
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:79:7a:6b:6c:22:85:c8:9f:43:8d:0a:e3:bc:c6:2f:27:da:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a73e2b7921138acf9b564ac35289e1a038d4906b6cc33254979223a65e0cf550, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:3d:ba:2e:40:8b:2c:b7:b2:09:de:1e:77:
87:42:b5:0e:ac:71:93:d4:f7:45:5b:aa:fb:c5:92:
30:27:c5:43:a8:a9:3f:72:3d:69:de:be:d0:94:1d:
2c:0e:fd:7b:ae:c5:2b:dc:8f:15:f9:6c:a8:18:de:
fd:a2:59:17:52:f0:3c:93:d8:de:5c:96:46:be:21:
4d:4b:55:91:a8:be:06:44:a5:00:66:ca:d4:e7:1a:
a2:96:34:e9:43:92:30:f3:a3:75:1f:c6:38:ee:58:
f4:7e:ab:c0:7c:ed:5d:64:b7:a6:41:ef:10:4a:64:
22:bd:e1:2e:59:bd:f6:10:75:89:dc:93:e1:34:bc:
6a:31:13:a9:2d:79:a6:b9:92:d0:1d:95:5e:a4:eb:
cf:0a:64:d8:b6:e8:9b:1c:7d:a0:39:85:f5:f5:2a:
d2:2c:ef:a5:23:77:82:b5:90:25:c8:ab:5f:d6:74:
04:c2:98:70:7b:2f:2c:ab:39:82:9e:a5:0c:73:43:
1f:b4:40:d9:6f:9d:ce:83:bb:6f:23:e3:07:90:6e:
89:53:e6:31:19:66:5d:4d:11:07:9a:0e:0f:8b:c9:
0c:22:4e:15:9f:7c:57:7f:0c:5f:ce:65:a9:6b:64:
a3:3a:60:f9:99:7a:72:a5:cf:23:ea:fc:97:4a:d6:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:2B:1C:B5:A3:A5:D4:33:AE:77:74:D7:0F:D2:77:BE:1B:46:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
51:77:34:0e:92:ff:9c:e8:c5:9f:9d:14:73:f6:88:b3:29:32:
c2:7a:ce:b2:82:8a:1f:f3:4c:1e:73:b2:dd:60:02:ec:40:64:
b9:20:80:17:21:8e:99:2d:73:70:ce:e8:c2:36:70:42:76:00:
0f:c8:ef:13:64:a3:ad:b7:1d:2a:b0:1a:50:b0:8f:85:b1:b8:
69:c3:ed:33:83:4c:63:c4:11:87:2f:de:ac:02:89:f1:e3:b8:
e7:a6:e4:f3:63:3a:f5:00:6c:95:c8:44:29:d6:dc:88:cb:55:
3d:88:9d:d6:9f:d6:de:f8:d1:68:7e:bc:16:fb:50:a6:91:79:
93:d0:95:c3:33:ce:54:aa:37:96:cc:de:92:30:53:89:f7:ad:
6d:c4:45:85:74:fd:84:45:d4:5e:8c:09:d1:12:d2:ba:e8:93:
8b:47:f2:f9:65:ee:74:e1:ea:97:ed:49:c7:0d:40:0e:0b:13:
5b:33:98:7d:6b:9b:7a:3a:2b:9d:42:dc:f1:e5:e2:5b:19:b4:
fb:74:5a:59:11:a8:d0:2a:2d:4e:c2:22:60:49:49:4d:c6:63:
4f:95:0b:42:2b:29:70:3f:0c:fa:5f:de:79:bd:cf:9b:4a:59:
df:44:4a:69:11:31:13:00:f2:f1:f2:c4:4c:97:cf:85:b2:69:
ff:e3:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:04 2025 by rpki-client