Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a51d6038-bb41-47b2-a883-07e17ac04d63.roa
File: a51d6038-bb41-47b2-a883-07e17ac04d63.roa (raw, json)
Hash identifier: 8QEAdE9ovMPfKCz+7GO/KjJwIFfiTVLmCQ4zH8sMpeM=
Subject key identifier: 90:4D:BF:3C:C1:DB:AD:71:79:F0:D0:49:B6:8F:C5:B9:DB:ED:11:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E339D6A1B036C9CA0B17649735E81C58FF927B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a51d6038-bb41-47b2-a883-07e17ac04d63.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:2040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:33:9d:6a:1b:03:6c:9c:a0:b1:76:49:73:5e:81:c5:8f:f9:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=261fc334898e2b66fe4e674f81c208ec40560f35bd93cc828f8b0d17c04b6fba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:b7:ec:0a:8f:8f:f6:60:79:66:c4:eb:a2:
2a:ce:7c:93:77:94:8d:a5:68:1f:15:e9:59:b5:a1:
39:69:d6:30:93:cd:31:ef:c2:02:24:10:a1:1b:d5:
8a:5d:01:3f:5e:a5:bc:a0:b9:8f:5b:ae:77:dc:f5:
54:22:ec:0d:2d:85:34:20:62:14:ce:f8:52:3d:40:
8a:73:c2:aa:ee:01:ac:2a:3b:c9:c9:88:5b:5c:eb:
1f:63:26:ad:74:b7:b2:8a:35:cd:73:76:4b:4c:d3:
34:e8:30:c9:fc:38:d1:66:42:b4:6a:45:1b:1d:94:
33:86:a0:b1:f2:40:13:11:6a:3c:65:b0:b0:c9:fc:
9c:6d:38:66:db:c8:c3:bf:d3:74:fe:c6:26:f9:99:
4d:d3:ff:76:61:42:93:a1:04:90:dd:ac:33:0f:f9:
5c:81:e1:a7:48:f6:ab:bc:c4:72:71:8c:07:ae:27:
1c:83:41:3e:a0:a8:a5:06:91:a2:73:18:3d:ad:37:
b6:ee:16:57:34:89:c8:56:99:34:94:48:83:43:c8:
00:bf:e7:96:ad:77:e3:86:1c:5c:cb:ed:49:b0:cf:
b5:9b:e7:0f:0b:c4:0f:b0:ac:2e:6f:25:07:b2:9c:
bd:65:36:f0:33:e0:95:45:2d:20:f3:3b:86:94:3e:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:BF:3C:C1:DB:AD:71:79:F0:D0:49:B6:8F:C5:B9:DB:ED:11:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a51d6038-bb41-47b2-a883-07e17ac04d63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:2040::/46
Signature Algorithm: sha256WithRSAEncryption
5c:25:46:e8:40:24:e9:50:98:34:10:6c:57:a6:7f:78:f3:31:
eb:43:35:e4:e2:bd:e3:00:da:0e:da:b6:45:6f:b8:4f:86:af:
f0:54:a5:6f:df:58:46:30:25:dd:76:c2:47:cc:d9:78:9d:26:
71:52:91:17:27:8a:96:8e:e0:a8:39:36:00:43:da:fa:9f:8a:
7e:aa:2a:bf:27:6e:72:fe:08:b9:c4:de:8b:9a:88:5b:a3:3e:
92:7b:fb:03:9d:82:a5:70:1f:2d:11:a7:07:dc:d2:2e:de:ae:
9d:d5:38:7d:1f:ba:96:d0:5c:7e:1a:df:7c:45:4f:16:a7:58:
95:4c:18:88:9a:e7:67:63:67:27:a3:9a:0f:a9:8b:5c:0d:91:
8a:3f:48:b4:d8:36:24:d1:1b:bb:7a:f9:80:5a:89:ae:16:1a:
61:5c:88:da:14:6f:ed:96:9e:af:40:64:e9:65:51:fa:de:d4:
e3:cf:d8:02:9e:60:61:2c:8e:0a:ae:07:3a:5b:03:fc:f6:e7:
15:67:94:22:3d:d2:0a:c5:35:b1:c9:51:7f:cc:13:03:a3:fb:
a9:0e:b8:c3:16:aa:db:44:cf:35:61:bc:ae:de:41:35:59:82:
2c:c6:e8:bd:3e:1d:f0:0f:31:96:1b:fb:98:60:48:63:da:2f:
a1:e1:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:34 2025 by rpki-client