Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
File: 99404275-57dd-4a36-8c29-529ab06d1d00.roa (raw, json)
Hash identifier: +wo8nlE6NJ4z6JC/FUTmt8KvFFasTtWhwsaYPtLIXpE=
Subject key identifier: ED:21:AA:D3:9A:35:78:DE:E5:B6:E4:97:24:A4:CF:40:AA:E8:27:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1116258E222F9F4A58B053B9910AAA66C60EBCC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:16:25:8e:22:2f:9f:4a:58:b0:53:b9:91:0a:aa:66:c6:0e:bc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f31d5486fff2210eb90db545552c5562b45ecc4babe77d8ad8bec12761e0e34f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:26:53:72:be:fc:df:aa:f0:b1:a8:ce:3b:
31:bc:b2:c6:be:5e:a8:a3:4e:93:28:17:aa:ec:60:
e0:ec:08:82:79:03:0f:77:b8:0a:a3:91:5a:36:0b:
42:a7:d2:f4:00:1c:c8:da:3e:d6:f1:ae:ce:b1:d5:
e7:1f:76:ed:0d:0d:e4:b4:54:ea:ab:bd:32:4e:20:
80:d4:de:06:30:4d:f4:14:bd:54:78:27:f9:54:d4:
b9:35:e7:5e:cb:5e:a3:cb:ac:bf:61:af:94:e8:b8:
bd:3c:12:5a:70:eb:9f:72:78:49:4f:5d:5d:d5:35:
8f:93:03:8b:69:08:f8:91:d0:65:70:57:e2:db:e4:
c2:37:10:ae:8f:50:81:b4:22:7e:0b:e8:5c:73:de:
78:48:8f:b6:e1:cb:41:37:ff:1f:01:c1:33:dc:ab:
36:73:81:f0:29:cd:7f:31:fb:49:1f:25:db:f4:bc:
93:1b:19:38:e8:71:4d:9d:f7:1c:c5:09:56:f7:4f:
0b:ea:5c:90:e5:1c:a2:05:49:d4:fc:78:40:0a:1a:
cc:56:a5:bf:64:b5:9f:e0:1b:f1:69:21:40:a0:f8:
94:0b:08:fa:92:94:02:d2:12:6d:08:c7:80:60:8b:
e5:7d:d8:57:82:d5:46:f8:27:df:64:d1:3f:27:02:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:21:AA:D3:9A:35:78:DE:E5:B6:E4:97:24:A4:CF:40:AA:E8:27:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:b000::/40
Signature Algorithm: sha256WithRSAEncryption
40:9c:ac:19:a5:35:a5:6f:33:ed:6c:b5:e1:63:ba:0e:11:90:
ca:43:08:be:22:ac:13:fd:4d:36:ce:da:89:d9:e4:07:e4:eb:
b3:60:f1:5d:0c:e9:03:e6:45:41:69:2e:d5:c0:8c:08:35:b5:
46:af:12:c0:44:de:37:07:43:fc:49:1b:7e:d9:1c:08:a8:b1:
40:46:2f:a2:7e:c3:c2:4c:e2:c9:9f:41:fa:60:75:a4:9f:c2:
34:8d:88:db:7b:58:27:53:83:a6:0d:45:85:74:14:75:ab:9d:
3f:0e:ba:6a:09:c7:fc:f2:e4:33:2a:15:c9:1f:ac:b8:b0:f1:
1c:40:00:ff:2b:45:ae:cc:0a:91:74:1e:8a:5a:3e:cb:28:cf:
d0:c0:45:0c:81:fe:63:22:23:53:24:80:a0:5a:85:68:3f:70:
e3:f2:70:a3:14:1a:21:de:3e:16:cc:91:0b:0d:da:6a:06:1b:
6b:4e:0a:9a:5a:bc:35:4f:95:11:d0:eb:e7:3f:59:36:6c:3b:
09:c6:9f:bd:69:48:d5:26:c5:bf:0c:52:a3:32:76:d9:9b:2b:
19:73:7c:ed:46:9b:b6:e9:5f:63:6b:3e:2a:50:7a:87:da:79:
7a:22:1b:8c:04:ff:ea:28:96:f7:ae:07:8d:46:c5:10:9d:73:
0d:e5:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:56:12 2025 by rpki-client