Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa
File: 9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa (raw, json)
Hash identifier: XW432fZLNrDEBkM5BIep7nULAj6umeDjMUF1KrVK+gg=
Subject key identifier: 27:58:FB:C7:E9:64:C8:73:DB:F0:DE:06:80:0B:CF:C0:C5:63:65:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10BB20EE1B04778FA5FDE20D5C4C1A46BAD85058
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bb:20:ee:1b:04:77:8f:a5:fd:e2:0d:5c:4c:1a:46:ba:d8:50:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c33589f747237a91128ce33913416744cc22f76b8e59aa0ca0bcb018691aa621, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:ac:e1:a7:05:44:83:93:fc:14:54:ce:cb:
54:68:18:07:76:b1:f9:7f:54:8d:93:f3:a4:4b:46:
2a:ab:bd:b3:65:76:12:af:e2:b0:ba:a6:51:12:41:
d2:74:ea:b1:ef:0e:44:64:52:d2:23:0f:b2:70:8d:
ce:ca:94:1b:1a:27:58:74:2c:92:22:9a:59:20:9d:
e3:54:07:03:e0:d3:59:43:a8:93:64:ef:29:3c:82:
4e:63:56:da:8f:36:7c:f8:0d:14:e3:4e:5a:61:9c:
18:0b:12:33:a9:e9:5b:ca:a0:5a:ee:d6:2c:1c:6a:
ca:20:94:61:a3:89:cf:93:dd:e5:7f:03:a5:fc:af:
8d:b5:e4:b4:93:77:bf:b8:1c:f0:ca:65:8d:8c:1e:
5c:e1:4b:67:23:40:fa:9f:55:dd:ae:96:11:db:f6:
93:a1:07:5a:f9:05:7d:a3:1f:83:57:a8:50:0d:d0:
58:8c:fe:fc:21:ae:ab:8f:08:34:6f:fc:78:54:75:
f3:d4:71:e9:6b:da:9c:06:e9:75:34:9c:12:9e:a3:
29:49:e9:3a:53:8e:17:45:61:28:94:25:ee:dd:02:
e4:9b:3f:09:8c:83:42:36:04:fa:2a:92:9a:35:c4:
d7:82:6a:6d:fb:ec:64:dd:bc:b4:01:51:21:88:7d:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:FB:C7:E9:64:C8:73:DB:F0:DE:06:80:0B:CF:C0:C5:63:65:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a000::/40
Signature Algorithm: sha256WithRSAEncryption
63:40:5e:bf:68:69:c3:82:8f:46:22:a4:81:61:dd:5b:74:94:
9c:13:c6:6f:c5:16:91:2d:ec:e2:f7:da:77:2d:cc:74:7c:0d:
11:c3:1f:63:f2:0b:6e:5b:30:2f:7f:61:c4:9e:ee:f1:fd:f4:
2a:9a:ff:0b:e9:25:f6:70:00:6e:51:c3:3d:56:c9:5d:e7:35:
2b:f3:6e:1e:60:94:0b:40:22:35:d2:a1:b0:a3:ae:30:f3:9c:
d4:52:6d:e0:6e:79:8f:13:33:65:27:1e:ef:57:fc:53:cc:43:
59:48:08:45:f0:4c:fc:08:45:53:84:3f:8b:d4:ba:73:49:26:
42:66:1c:c0:30:5d:c8:44:bb:49:5d:16:d3:02:ed:24:13:c3:
a3:34:f0:5c:af:15:3f:0f:e2:4d:eb:5d:4a:94:db:96:03:43:
83:ca:f0:a3:82:ff:8d:d3:11:6c:11:ea:24:4b:d8:50:4e:63:
6d:9d:3b:d9:e0:4e:c1:72:b0:9d:04:1e:ed:65:57:ce:94:5b:
19:db:28:f9:85:77:7f:a6:16:cb:75:a3:30:17:99:14:8c:fa:
01:a4:e7:cd:bd:ea:c3:b1:5a:95:d3:f3:79:10:38:9f:59:e0:
5a:3e:4b:2f:06:a6:49:78:6a:97:63:aa:72:cd:13:a4:d1:d2:
41:a6:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:05 2025 by rpki-client