Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier: ktIgLQ0ueb7nNUXtUi/ml2CnHdskSOGtXHy/6+yXA/U=
Subject key identifier: 27:A3:80:27:3C:4F:64:5E:DB:A0:A5:26:4F:DE:40:B3:51:58:CF:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2289A9E5EC218DAED0A921B124953DDF6062A692
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:89:a9:e5:ec:21:8d:ae:d0:a9:21:b1:24:95:3d:df:60:62:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3ed00f21b7a2a552e159beb1fd16f65e94065507d719abee8c559c1864ab1288, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:b3:12:fc:99:ba:cb:6c:2a:ae:7d:7d:d7:
bf:bd:85:38:c5:c7:20:cb:0d:3f:3e:c5:4f:35:a2:
e0:22:1c:57:1a:f3:d8:9d:2f:20:0e:fe:73:d5:54:
54:24:31:b6:f6:20:be:c5:82:7a:a8:ca:e8:e3:23:
02:c1:24:3b:27:9a:10:6f:c0:22:cb:47:fe:1c:83:
ff:78:1f:37:87:99:4c:ba:25:e0:a9:2a:76:5d:1b:
87:d1:7c:c0:73:83:1d:1a:25:54:ee:96:86:19:55:
c6:a9:90:28:cf:db:69:fc:2d:3d:43:20:09:e7:f5:
a0:25:e5:8a:b3:89:c0:76:c7:11:8d:ab:34:50:59:
a7:0c:a6:3b:1a:67:ae:c7:93:ae:43:99:a2:d0:d4:
64:2e:a2:29:14:aa:44:36:f5:63:da:95:28:6d:56:
16:1f:51:5f:b8:f2:73:8a:d1:1a:8e:f4:2d:55:54:
36:c7:32:c5:15:83:6b:d0:d4:f2:ff:65:28:8d:28:
0c:f6:1a:cc:e0:06:6f:05:ed:05:2d:44:92:e8:66:
c0:c3:03:48:fa:85:64:4b:14:e3:c9:be:2d:bf:45:
66:b7:fd:a7:63:92:5e:fd:7e:64:d1:c7:e3:96:0a:
1f:d0:d4:dc:2b:14:60:22:61:0d:af:83:80:1d:45:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:80:27:3C:4F:64:5E:DB:A0:A5:26:4F:DE:40:B3:51:58:CF:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:62:50:b7:88:c2:ae:33:bf:47:91:5c:04:aa:9c:0c:f3:30:
d2:e3:f8:f1:36:96:d6:d0:5e:8e:db:96:0b:2e:dc:9b:b3:6a:
d1:e9:20:28:79:62:e4:37:87:a3:9f:74:83:ef:72:e6:3c:fc:
0d:37:a4:a1:1a:67:fb:44:37:9a:42:1b:a1:ce:db:e8:a0:d1:
64:c3:98:da:fd:bd:0f:c8:f2:31:25:c0:45:45:93:d0:da:d7:
0c:81:97:a0:9f:6d:f0:fb:73:48:3b:08:6b:5f:a2:e8:f1:af:
9b:bb:a2:51:da:a3:6c:e7:5d:5c:04:3e:f9:a0:0d:56:6b:b8:
ef:39:58:08:3d:5f:27:bb:a8:de:73:ce:7c:a9:c9:19:aa:c0:
82:08:5a:ff:d0:f1:31:84:bc:7e:92:cd:e9:e2:62:cd:26:84:
25:79:70:fa:5b:54:7e:3f:1e:f3:1d:a7:1f:75:5e:0b:7c:86:
c6:30:e0:88:a1:c9:2e:67:d3:2b:18:43:61:a3:93:f3:92:f3:
74:b4:59:4b:74:fa:5f:da:22:c2:06:e2:3f:6d:75:02:84:5c:
74:04:8b:c6:7e:69:34:a5:81:52:69:b7:56:33:5b:65:f9:81:
4a:19:c2:65:ab:17:47:3b:72:3a:10:6f:4a:64:ed:90:16:74:
6c:45:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:30 2025 by rpki-client