Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7975abe-0cd8-4590-b58b-703fa5f4bdfd.roa
File: a7975abe-0cd8-4590-b58b-703fa5f4bdfd.roa (raw, json)
Hash identifier: CM8gdotAy//dazgVAJzVXA1/IR1Tf0b20asyqkrMSGo=
Subject key identifier: 45:98:25:FD:5E:29:DC:13:B7:B4:19:5D:37:F0:97:1F:11:F4:4A:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3417B7BA671A63D20F1A522385B0EFA82C561B0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7975abe-0cd8-4590-b58b-703fa5f4bdfd.roa
Signing time: Thu 30 Jan 2025 00:00:00 +0000
ROA not before: Thu 30 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:17:b7:ba:67:1a:63:d2:0f:1a:52:23:85:b0:ef:a8:2c:56:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 30 00:00:00 2025 GMT
Not After : Mar 6 23:59:59 2025 GMT
Subject: serialNumber=6e5fd742c80f6a3fbbe56dfa8ee97d1e34e5bab14d650be707507de055256044, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:2b:b0:33:e1:e4:43:f9:2a:49:8a:79:a5:
ee:6d:3b:46:bd:45:9a:25:f8:45:ee:4d:27:84:bd:
5e:20:5b:46:1b:9d:87:89:f0:2a:db:57:2c:9f:30:
bd:bb:3d:b1:3c:83:b8:02:01:83:8b:d8:77:4d:5d:
24:45:20:8b:3a:6f:bf:1a:8f:5f:e5:42:10:8c:6d:
78:6a:5d:46:4e:5c:a0:bd:85:c4:29:08:81:3f:ed:
c1:3f:31:cf:bd:38:a4:3c:1c:ba:40:6e:3f:4b:d5:
68:c8:16:19:30:31:e0:39:d8:68:63:79:02:fb:83:
db:56:79:25:67:76:61:fa:d4:71:ff:65:61:0a:49:
26:ac:7d:78:23:90:c7:b7:93:52:14:69:26:59:4f:
cf:d2:f1:c1:e3:d9:74:20:03:62:df:7a:12:a7:ba:
1d:09:5f:68:07:62:81:76:9b:f3:c6:c9:f5:20:46:
c3:f0:3e:61:06:4c:d1:6d:54:2e:71:b0:ad:3a:88:
f2:c8:7a:ab:18:7c:e9:8b:53:f8:47:44:bc:d6:68:
7d:35:1f:dd:b9:4d:d2:d0:67:10:3b:71:d1:78:14:
fb:34:3b:22:e7:d2:15:bf:fc:76:13:47:5a:d5:7f:
13:05:37:58:ce:9a:c2:20:05:ee:56:02:dc:47:98:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:25:FD:5E:29:DC:13:B7:B4:19:5D:37:F0:97:1F:11:F4:4A:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7975abe-0cd8-4590-b58b-703fa5f4bdfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:2000::/48
Signature Algorithm: sha256WithRSAEncryption
bf:99:14:b8:dd:94:08:e7:be:12:17:4b:75:09:df:64:04:52:
19:6f:60:df:a1:af:11:7f:ef:86:85:ac:cd:0f:f8:0f:b9:ea:
a9:ef:22:df:3a:da:89:14:41:13:df:1d:26:18:59:d6:6c:a3:
df:ce:da:79:a4:30:e0:52:8f:8c:15:83:66:46:f1:7b:18:be:
ed:4e:e7:3a:22:8b:df:f9:07:85:9c:9a:8f:2f:ce:c2:8d:ea:
3a:fe:29:53:88:8e:48:c1:27:08:c4:7d:f1:3c:f1:ef:ed:63:
35:39:2a:10:33:68:d6:85:df:0d:9a:52:b3:d8:81:f3:6f:a9:
13:af:1b:f5:39:de:8e:a1:0e:15:c7:80:e0:ee:e8:d4:51:46:
23:39:ad:21:db:de:42:84:24:be:c2:1d:a0:bb:21:7f:15:60:
36:21:e1:fc:ed:3a:c2:ce:44:92:b7:ee:36:b7:d7:39:45:4c:
c1:15:3a:6b:83:5a:76:d7:87:cf:fc:04:48:74:1b:5f:c0:3c:
1c:28:62:2b:6f:35:c4:a1:bf:b5:ad:5c:4b:d3:a6:72:92:25:
ec:06:da:a1:08:08:c4:55:2f:e9:f0:6c:f1:c8:cc:8a:1a:ff:
b6:5a:af:46:69:52:13:2a:73:54:d7:02:46:27:10:71:50:c9:
b7:d2:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:43 2025 by rpki-client