Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
File: 9d9b5cac-e262-4659-a49b-3c498d1bc516.roa (raw, json)
Hash identifier: AXptcg2bWEpjQkxv3sYoPt2NwLOMI+ShyCYv7C8TfdQ=
Subject key identifier: 90:FE:BF:93:85:40:AC:30:17:53:1F:9F:FB:BB:E8:B9:3F:BA:A2:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3DFA1C4CF946662B1826757E0996100BC62E2403
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:b080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fa:1c:4c:f9:46:66:2b:18:26:75:7e:09:96:10:0b:c6:2e:24:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=cdeb848d4950c9d7bc6ec9faadbbb697e50cdf17e206889827e3f3df592ad702, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:8e:c2:31:31:41:de:26:61:13:29:13:f3:
dd:dd:b1:b8:9a:97:e1:5e:9c:73:ff:f0:09:91:2c:
79:4d:d5:5a:a0:1f:bf:ed:b7:78:e3:4a:81:0e:3c:
c3:58:69:e0:d6:d4:3a:e4:80:62:5e:5a:df:4e:01:
33:91:4d:e2:7e:14:86:96:1c:1f:f3:d3:7e:5a:49:
bd:35:c0:f3:ec:61:1c:ad:93:6c:be:39:cc:ed:aa:
52:fc:a5:04:a6:db:04:e7:73:43:fb:fe:ae:d1:7a:
61:48:5e:32:c5:4f:19:a2:c3:54:11:1c:4c:85:49:
90:e3:70:bb:82:91:49:ad:0c:8f:48:97:b0:40:ab:
da:bd:fe:ef:cc:ba:54:6b:ea:a5:27:8f:41:d6:be:
f7:9e:15:77:b4:52:1f:46:cb:10:82:b1:6d:39:1c:
be:41:2b:25:90:1b:87:de:de:f6:2f:5a:c7:84:2a:
55:b2:aa:5d:82:8b:1c:4b:25:03:6d:9c:7f:34:44:
3b:94:ab:14:2e:af:32:26:08:fb:24:98:be:91:2b:
76:f5:64:83:3d:5d:c2:f5:9a:ff:ee:6b:3d:d8:5c:
72:00:c1:a6:c0:cf:9c:0e:d4:0f:43:05:c6:a1:f5:
49:5b:b8:19:11:dc:33:0d:8a:03:55:3a:6c:01:bb:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:BF:93:85:40:AC:30:17:53:1F:9F:FB:BB:E8:B9:3F:BA:A2:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:b080::/46
Signature Algorithm: sha256WithRSAEncryption
25:cf:de:f8:db:b0:96:80:8a:e5:05:64:66:d3:2e:5e:7f:2c:
60:fe:45:53:fa:0d:17:d3:9a:35:a5:b5:95:81:ce:3b:79:4f:
5b:f1:52:92:40:b2:91:2c:6e:2d:01:6e:b1:be:a6:05:c1:c3:
10:31:7e:f9:6e:c3:73:d1:09:e9:e5:cb:7a:35:9b:25:72:59:
73:72:f4:f0:54:a5:bd:40:24:15:53:37:c6:af:0d:f7:74:46:
fe:c0:b6:86:30:d6:18:16:3d:e6:9b:c7:8d:a0:79:23:09:46:
31:e2:9f:43:25:cb:06:c3:03:c6:99:18:3e:39:38:6a:62:53:
8a:1a:23:3e:50:ae:3b:59:61:4a:32:40:b7:5c:eb:21:34:7a:
85:d9:ed:16:60:8b:13:d8:10:fc:ed:9e:a2:99:be:8b:86:d5:
a6:9e:19:4a:aa:03:4b:82:2f:9c:35:7e:3a:93:cf:3e:37:44:
ac:12:dd:1c:47:2f:97:d5:b4:a8:cb:cd:3f:76:fb:6f:63:17:
4f:76:96:76:65:71:63:25:1a:f2:99:87:1d:de:02:d7:a1:5e:
05:a6:19:4f:5c:25:ab:04:ea:dc:36:6d:75:79:16:8c:19:01:
0f:04:76:5f:4c:0f:e1:0f:97:70:ec:79:f2:c8:77:a2:66:cf:
38:e8:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:20 2025 by rpki-client