Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/979bc73f-7d87-4cfa-93bd-0378cf1d6aef.roa
File: 979bc73f-7d87-4cfa-93bd-0378cf1d6aef.roa (raw, json)
Hash identifier: xXYLfH8jdnFgJywYrY81jDg/78Y99LpMjORSykgy/rA=
Subject key identifier: FC:36:26:36:39:5C:C1:74:9D:02:41:7E:D8:65:1D:49:53:D8:95:D7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 399FEDAA7C7770E845CD7F328E57E6F48006605B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/979bc73f-7d87-4cfa-93bd-0378cf1d6aef.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9f:ed:aa:7c:77:70:e8:45:cd:7f:32:8e:57:e6:f4:80:06:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d4b1652967dfa6e354a9c6fdeb96ade0053d27e9fa9e10b14584388b4f2f7287, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:9f:20:4e:88:25:43:bd:a0:51:d4:36:0a:
51:90:04:68:7e:52:86:56:44:18:c4:63:4a:a9:f4:
cd:87:03:27:36:78:aa:fd:f4:7a:41:e8:f1:00:2a:
29:ca:9c:3d:e5:82:59:55:41:0b:49:77:d1:51:a0:
f9:ec:40:75:4b:63:fa:65:8a:ed:58:15:02:11:65:
2f:1c:26:58:c3:5d:7b:a6:c4:22:57:cd:24:51:21:
ce:50:74:82:b8:d3:62:6e:60:d3:20:3b:1e:8e:87:
32:5b:2e:d2:c0:0a:01:d3:da:ac:7a:01:e4:2b:2c:
cc:26:09:31:f1:09:b9:5a:cb:f9:6a:19:3f:10:e4:
e1:fd:2a:3b:d9:08:0a:38:6f:1f:ec:f3:9a:67:89:
38:98:19:7b:a8:e6:a0:3e:96:a6:1a:f5:26:16:ec:
17:2b:cf:c8:32:42:65:93:29:f9:aa:ac:f2:44:7d:
81:f2:9a:7d:13:cc:b5:bd:ff:89:fe:e5:77:39:4f:
87:8f:87:83:c4:38:46:13:fd:c6:91:1f:14:41:84:
40:9a:98:4c:f3:f1:be:0a:f6:ba:c7:72:8f:ef:3b:
b5:83:8e:c6:2e:9c:51:d1:f3:e9:5f:d6:bd:11:f3:
f3:6e:85:84:94:fe:fe:5d:ba:b1:c4:3f:5b:bf:8f:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:26:36:39:5C:C1:74:9D:02:41:7E:D8:65:1D:49:53:D8:95:D7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/979bc73f-7d87-4cfa-93bd-0378cf1d6aef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8040::/48
Signature Algorithm: sha256WithRSAEncryption
7f:86:4d:ef:3a:2a:a5:97:12:09:2c:d7:9b:93:8a:9d:fb:6a:
b8:ea:ea:6c:b9:01:33:c2:d8:b9:cb:b2:6f:0e:9e:6a:9b:d1:
d7:77:ad:b0:d2:d0:c5:38:bd:23:92:17:04:8c:9f:5b:a1:e8:
5f:c0:6b:3a:f0:39:43:d3:19:82:52:8b:2f:ed:1d:b1:ee:f7:
d6:cb:5c:2b:bb:3e:36:90:9f:2a:04:33:4a:9d:da:5c:97:c9:
f5:59:ea:51:13:6e:df:ea:23:05:cb:8e:cf:5b:dc:48:7c:0f:
46:3e:4d:66:0a:07:b2:36:b3:a3:80:15:28:ee:c8:7f:9c:f3:
12:bc:f3:82:65:5d:fe:5b:b5:9f:1b:0a:4d:3f:bb:b6:2d:29:
a0:07:5f:7a:36:95:d0:f0:c3:8b:b9:76:91:99:93:78:40:cb:
e5:19:86:9c:dd:ee:63:ff:7a:4d:a9:27:7a:16:60:88:4d:fa:
3a:57:a9:43:21:51:a1:a9:65:38:1a:09:c0:c9:58:c8:78:59:
b3:69:ad:12:ef:28:5e:6b:b9:e7:10:63:53:fa:5c:4c:f1:10:
90:2a:0c:2c:7f:57:c6:43:9e:b7:30:db:25:7f:70:94:37:e9:
d5:97:9a:40:15:86:5a:6d:df:13:51:62:00:bd:38:af:d1:6b:
6b:91:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:17 2025 by rpki-client