Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
File: a7031a07-12ba-45f8-a53b-6bd5b713c999.roa (raw, json)
Hash identifier: 8k4kWK50KEXjN5A6cqwj3/I/jawTuNdEHRkWlXmIrEk=
Subject key identifier: 3A:2B:0C:A4:05:BA:60:17:84:62:92:4E:AD:B2:3F:E8:A9:BB:6C:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 416444707BACBC6A490C03A9CFE4DFA78A817EF6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:64:44:70:7b:ac:bc:6a:49:0c:03:a9:cf:e4:df:a7:8a:81:7e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3ad8a0f7a4d75847e32f2cc64e00039390b22f7dafae658bb0734b1d14d6cce9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:2e:8a:b4:94:e2:70:28:3f:53:6b:a7:cd:
1b:75:47:e5:e3:b0:4f:cb:48:d0:7b:6a:3d:c1:f1:
3f:91:5b:40:41:6e:18:5a:7e:70:8a:a3:6a:dd:1d:
42:69:23:fa:95:3e:cd:c1:46:93:5c:bd:41:32:50:
4a:04:a2:53:c0:52:02:d1:fe:65:e7:8d:2f:17:0d:
d7:1f:db:da:4f:70:5b:12:87:04:f8:5a:b0:92:a8:
79:9b:49:5d:a1:61:af:44:34:c2:78:b5:90:e3:8a:
29:89:e0:70:56:9e:f9:48:df:e8:2a:bc:3a:ea:e7:
15:e2:11:18:e5:36:57:15:5c:68:eb:1f:f9:f3:c8:
1e:46:0c:78:3f:c8:bc:42:97:e4:6f:48:64:24:ed:
9d:9e:59:2b:34:54:b6:15:8a:18:7c:55:2c:9a:1a:
1e:78:8b:d6:4d:0c:99:73:45:e8:ed:07:32:8d:c0:
86:20:44:f9:fb:f9:c6:82:cb:51:5d:91:aa:62:73:
d0:f7:b9:38:fa:a3:6e:a1:08:7f:b6:6a:23:48:09:
6f:d2:13:18:4a:07:be:22:00:0e:1c:e0:80:6e:63:
d8:2a:98:8f:ee:54:ac:a2:47:ba:73:2e:47:ef:5f:
4e:e7:2e:b9:92:02:6c:d3:64:c4:9b:d7:f5:6e:5c:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:0C:A4:05:BA:60:17:84:62:92:4E:AD:B2:3F:E8:A9:BB:6C:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:400::/38
Signature Algorithm: sha256WithRSAEncryption
77:bd:d3:b4:19:b8:cf:6d:74:d1:99:c6:6f:d1:a5:8d:f8:95:
5a:d6:4f:f3:8a:6c:ab:3f:fa:b4:85:db:83:bb:10:39:6e:29:
2f:92:bc:49:08:66:59:42:e0:cc:6c:46:ed:e1:a5:de:48:e6:
89:51:10:3a:73:cf:42:39:e7:94:01:9f:f0:00:9c:1f:be:59:
fd:6f:4d:cf:3e:a6:7c:1a:0c:14:0d:5c:a8:cb:bb:7e:11:72:
0d:b2:5d:82:84:a2:3a:28:13:e2:a7:bc:6c:36:0c:9b:f6:c2:
9a:11:af:23:00:3d:c1:06:17:2a:dc:72:6b:18:1e:84:27:06:
4e:50:e7:7a:01:68:42:03:ba:e0:58:2f:d6:d8:5c:5b:27:05:
03:77:d5:15:87:82:0e:8f:90:b3:bd:61:f6:ac:9c:86:01:b7:
e6:6e:bd:50:8c:fa:b1:6f:31:4d:ce:da:af:ad:db:e4:61:6e:
eb:26:e2:21:90:cf:6b:b9:2d:48:d9:30:b5:ec:d0:2e:e8:9e:
52:e9:15:cb:a5:cb:c0:06:7e:40:d3:a3:e4:a4:b3:19:46:b9:
0b:cb:c7:64:60:b4:78:18:69:2f:3b:53:27:83:17:c5:2e:14:
b0:48:5d:44:8c:37:7c:70:57:50:27:92:77:2b:e4:8c:6e:31:
77:c1:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:49 2025 by rpki-client