Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
File: 98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa (raw, json)
Hash identifier: NhbseiiP/lelEnhBa5DYzLZHAXQ/NZ0tkNtRXYCixbA=
Subject key identifier: D5:16:74:94:4E:29:F4:3B:6A:52:3D:17:DC:93:6E:F0:74:AA:40:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BFDF7007A1EA674D3737D279BE2B84C34819703
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fd:f7:00:7a:1e:a6:74:d3:73:7d:27:9b:e2:b8:4c:34:81:97:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2396e391cd92b8d20b7eda5d0adddce6cc04722eab70610f9ecfb2db2be63497, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:60:c2:fb:be:c6:e0:16:bf:8f:7c:c7:23:
bc:05:ab:e6:5c:f2:99:ba:00:68:c2:67:7d:c7:48:
71:90:62:b2:85:ff:f9:5f:80:09:66:9a:d4:99:5a:
03:bc:fa:59:e0:1f:d6:6b:58:c8:63:d6:33:29:48:
d1:30:8e:4c:ab:a4:de:2e:06:fb:86:d1:ac:ad:3f:
11:aa:0b:46:86:8f:cc:36:00:48:52:29:ca:2d:b8:
09:98:d0:3a:ea:ff:4b:30:34:97:29:d5:e3:bd:c8:
d7:60:55:4b:7d:f5:c0:21:15:21:6b:97:c1:08:c3:
06:45:96:64:40:1f:26:c7:4e:65:05:fa:97:0a:f3:
5d:52:d2:88:c9:f3:53:5e:b6:b4:3e:6b:42:cf:62:
c9:29:de:ee:94:bb:72:f5:89:f9:e7:14:af:48:ae:
08:cf:f3:0e:19:a3:cb:5a:89:60:ef:2b:5f:f1:a9:
06:4d:7c:9b:bf:94:6b:ec:f9:73:99:13:9e:db:4a:
7d:18:01:6c:7c:33:91:a5:5d:11:df:7b:8b:04:b7:
ed:77:1d:9c:74:f6:93:a1:7f:59:1b:2c:c2:63:a3:
15:81:12:af:19:7f:b0:40:57:42:95:2f:e5:06:b2:
93:c8:ce:d6:71:95:28:2c:c1:df:8d:2b:6a:b2:5c:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:74:94:4E:29:F4:3B:6A:52:3D:17:DC:93:6E:F0:74:AA:40:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/36
Signature Algorithm: sha256WithRSAEncryption
46:4c:78:60:80:f2:46:eb:46:4f:37:94:3d:95:d8:ad:32:0c:
b3:f9:a9:43:97:bb:92:21:0c:73:6a:c5:ea:b1:95:86:bc:63:
c6:1d:01:bf:91:df:b6:c4:d8:90:7e:56:1f:97:b7:44:fc:7b:
55:24:f4:52:db:99:84:db:91:a6:f6:bf:ce:dc:a6:61:61:90:
8e:d4:d2:b3:ae:cc:b3:82:54:30:0c:b0:9f:bf:58:b6:b2:d1:
1d:07:ca:be:c9:d5:13:aa:08:3c:f2:53:78:10:eb:9a:f2:67:
12:c6:53:ba:10:f1:de:9b:d6:80:13:01:ca:b8:e2:47:b5:e3:
48:55:5e:a6:6a:09:85:00:59:46:4d:1e:20:48:dd:ec:78:27:
c1:6e:a4:8f:ef:47:fd:5c:83:93:91:cf:d8:78:d2:1d:88:a0:
35:f8:7e:c0:ac:7a:17:b3:fb:d8:c6:c7:a1:24:60:4a:8a:06:
c5:89:f4:6b:e6:e6:6c:5e:6f:3a:9c:33:98:59:8c:a8:4f:39:
53:18:39:3e:2d:07:9a:34:bf:46:98:4e:c7:19:07:94:05:2d:
7e:e0:8c:f6:53:cd:b4:be:d5:59:ce:02:f6:5b:07:76:48:e6:
e1:94:d3:4a:19:2d:b7:65:0d:aa:7b:f0:db:71:01:61:a3:d6:
b1:11:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:10 2025 by rpki-client