Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a40e2cf2-d6e4-4813-a5aa-623eda8926e6.roa
File: a40e2cf2-d6e4-4813-a5aa-623eda8926e6.roa (raw, json)
Hash identifier: TwtYD6grajO21qG8KLRZYohrALUYT9OEBl/ucG8LE4c=
Subject key identifier: 47:B3:10:59:2E:6E:AC:1C:84:6D:BC:E0:23:38:29:7D:C5:1E:51:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 739ABB1D72DF33C9BE7AA03793E5FDEC73F85CCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a40e2cf2-d6e4-4813-a5aa-623eda8926e6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:6080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9a:bb:1d:72:df:33:c9:be:7a:a0:37:93:e5:fd:ec:73:f8:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=476f5fffbdbdd2c81600accc0c9e40fc20838ebb4334cd5a0e8601a259bdcff9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:9a:c3:47:5b:1b:05:9c:47:40:8a:4e:01:
04:aa:a6:f6:02:c9:26:e3:d5:d7:b1:3c:54:55:76:
1b:1c:5f:d7:96:a4:7a:79:50:56:17:22:2a:11:c6:
e4:f4:af:91:5e:36:44:1b:7e:29:c5:d3:6a:39:a5:
2a:c3:f1:e9:b7:bd:e0:06:65:23:08:77:24:14:c0:
f9:ad:96:b0:74:67:aa:bf:b0:f1:2e:98:75:f1:e6:
d6:e1:d5:57:85:d1:ad:e0:bf:d5:78:70:f9:dd:5e:
85:2a:82:d5:dc:1b:20:1f:13:a0:d3:82:3c:35:eb:
6e:6f:99:e7:72:3c:35:df:ec:26:f1:14:90:33:b4:
34:da:19:c1:27:31:76:fd:1f:aa:1c:22:8f:de:fa:
f2:ff:86:94:d2:d8:63:15:60:0e:69:97:c5:2c:d7:
85:a7:e2:51:37:07:27:2c:e0:73:ec:dc:bb:38:bc:
58:6f:c3:7d:47:bd:07:9f:71:dc:f4:0a:62:69:71:
fc:02:35:f1:84:78:11:ca:60:ef:bf:2a:ac:bb:e7:
fd:39:87:18:17:bb:ef:93:08:60:d7:e3:b9:31:bd:
bc:01:f0:51:a3:f6:23:e1:c8:6d:65:22:45:65:4f:
e4:39:64:14:96:62:4b:d9:fc:0b:e0:51:4d:45:9d:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:10:59:2E:6E:AC:1C:84:6D:BC:E0:23:38:29:7D:C5:1E:51:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a40e2cf2-d6e4-4813-a5aa-623eda8926e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:6080::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b0:e7:1f:28:42:ba:25:13:25:64:2e:64:47:b7:94:da:b6:
ec:b6:4d:b8:4c:4a:bd:36:48:9e:21:e4:4e:dc:3d:37:76:18:
65:1b:41:7b:50:ff:a0:59:41:81:32:e8:9d:54:cd:1d:2c:0c:
1d:90:fa:87:79:6d:b7:dd:47:3f:0f:40:0e:99:d4:f3:78:76:
4e:4f:0b:cf:8a:39:55:95:a3:8d:14:51:4c:33:51:2b:ff:4f:
15:7e:74:69:08:34:a8:2e:64:a8:f0:d3:75:0b:da:3b:8c:f7:
8b:67:70:04:4b:2f:24:be:62:6a:d2:38:90:87:15:d2:3f:98:
92:08:71:5b:20:9a:99:73:97:31:4a:2e:25:ca:2e:d6:b9:d1:
88:1d:11:08:e0:2d:82:3f:54:71:e5:20:9d:1d:30:de:bc:bc:
13:d3:b4:37:95:2f:f2:70:f7:0f:ba:8b:86:eb:a7:e6:8c:a1:
1d:56:3b:96:8b:fe:46:82:7e:d5:61:a6:ec:d5:aa:5e:68:3d:
ee:25:ca:6e:8d:4c:a3:9b:14:9c:b0:54:c7:49:95:e9:4c:b2:
7e:9a:80:17:a6:97:31:6e:6c:7b:64:ef:62:c4:67:c1:bd:38:
1e:c0:6b:8a:b3:d5:78:a0:0c:80:7f:2b:62:1e:9f:1c:91:7f:
2f:09:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:18:29 2025 by rpki-client