Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a37b3e49-cec5-4def-b3ef-5356277d82ab.roa
File: a37b3e49-cec5-4def-b3ef-5356277d82ab.roa (raw, json)
Hash identifier: Q5oPFK0pSzhbwq+WwMXweCXheQZWfP5QQ1XkEWXzMHc=
Subject key identifier: 82:82:4E:6E:82:36:C9:5E:C7:62:DA:A8:3A:BF:8C:40:71:F6:90:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73EEB8A31AF300587674E07EA816D7BE89D4507B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a37b3e49-cec5-4def-b3ef-5356277d82ab.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ee:b8:a3:1a:f3:00:58:76:74:e0:7e:a8:16:d7:be:89:d4:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=44e237ea7ff582ef465e7e1212163cbc4215e70d1223967fb75c47edddd50e74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:e1:f8:25:55:ff:7a:72:72:2b:b7:54:eb:
47:ea:d9:74:72:b9:40:15:e9:a1:5d:82:80:6b:08:
f0:66:5f:5b:cc:d7:cb:97:11:04:fc:7d:61:de:9e:
a5:a3:a0:c9:2c:a8:1a:20:48:6a:af:58:13:b9:6f:
5c:c4:8d:5b:dc:6a:ae:b8:79:ea:30:ed:13:8a:6d:
e8:7a:95:35:18:b1:e9:a4:f0:61:3c:c4:04:c8:e1:
4c:ae:ca:11:b3:03:19:f7:f0:72:9e:69:c5:71:ab:
22:46:2e:64:35:32:f7:8a:e8:a3:45:91:d1:14:22:
27:c9:af:be:4f:1c:a6:65:ef:e8:6c:e0:be:d3:11:
ee:c2:f6:cf:f1:70:29:b6:4e:c5:95:f6:1a:c6:1b:
fe:f9:cf:fd:e4:8f:76:e3:e0:8b:49:c7:c7:7f:20:
69:c2:e7:2f:5d:ea:08:1c:fa:b4:be:2e:2c:24:e4:
f0:cb:9d:49:35:eb:19:b7:65:93:d5:f7:ab:6c:b3:
2f:19:4a:5a:ed:47:85:61:83:b0:70:13:f5:fd:99:
e1:40:8e:7c:1d:57:cf:73:52:d2:7f:24:23:0b:7e:
c4:0f:f7:d5:df:a9:6b:19:e4:96:18:cf:cc:41:0b:
c8:32:18:92:7c:0d:96:56:48:fa:a7:8b:04:24:8d:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:4E:6E:82:36:C9:5E:C7:62:DA:A8:3A:BF:8C:40:71:F6:90:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a37b3e49-cec5-4def-b3ef-5356277d82ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:1000::/40
Signature Algorithm: sha256WithRSAEncryption
30:83:29:ec:22:00:79:0e:1f:1f:03:f7:5b:7a:e0:00:b8:ea:
95:f3:3f:22:52:ad:f3:17:6a:fa:6a:9c:ee:67:b6:e3:df:95:
35:8b:34:bd:66:e0:97:80:1d:5b:93:1f:c4:ab:03:cf:f9:29:
4a:22:02:64:43:fa:39:29:d3:33:be:0c:95:17:24:76:e2:7f:
6d:a8:93:9b:55:eb:bf:5b:19:06:c6:ed:c8:6b:86:7f:26:52:
b7:c3:90:dd:95:c0:09:57:1f:8e:cf:03:02:96:94:b8:ec:73:
c8:7d:1c:06:86:1d:40:7a:70:df:af:87:8f:27:8f:27:b5:0c:
7c:56:d7:78:ed:de:30:52:88:90:32:df:3d:63:7f:4e:98:77:
68:1b:8a:8d:12:80:48:2b:ac:85:65:b9:e1:f2:82:dd:d7:6a:
5b:6c:6e:ee:d6:5c:3a:41:9b:a2:5d:ad:08:ca:3c:5c:10:6c:
11:c5:77:45:84:18:0b:15:0e:bf:00:54:ea:2f:37:5f:f1:0a:
ff:91:b5:34:45:d6:18:a4:cf:f5:eb:1b:54:c1:f0:78:82:37:
0f:c1:cd:3b:9d:56:20:24:0a:8d:e1:68:04:9e:d5:56:02:72:
de:a6:66:1b:d8:8a:75:65:cc:6c:66:15:d9:1d:29:a4:4c:ca:
a2:9c:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:55 2025 by rpki-client