Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
File: a8cd111d-bddb-47e0-af43-fc5a8d930376.roa (raw, json)
Hash identifier: SCTyxU8BhWIOUrPOCiOOVzo0iHf9YyrSTrv5yaIeooc=
Subject key identifier: 16:67:17:AA:07:29:07:84:15:D8:32:6A:DE:3A:CA:54:A4:E9:3A:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C1DB362599BC6BF18A0B1D05838D768C5C5095D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1d:b3:62:59:9b:c6:bf:18:a0:b1:d0:58:38:d7:68:c5:c5:09:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3f45b31697fe61dc680bdb4b9e903a2228923d62211143ea7cd1a14ffd64821d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:d1:f8:9a:84:47:21:a7:92:e5:18:59:fc:
05:cf:10:cc:19:08:f9:40:90:1e:cd:bd:bc:c5:87:
1f:1d:e1:40:79:63:e2:2d:4d:26:4e:4e:7f:86:35:
b5:26:31:ef:54:d2:a5:25:98:41:c3:82:35:7e:97:
ba:84:aa:67:3b:9c:d9:7a:e1:fa:85:f5:39:c3:d0:
ff:f8:bf:a2:85:df:75:bc:fa:31:72:e5:0c:67:67:
0a:9a:57:b7:92:dd:48:f0:b6:3d:0e:18:d5:9e:9b:
d3:6a:f4:89:a8:b1:2a:a6:22:e0:42:c1:3a:36:15:
26:3b:1a:de:8b:69:bd:ee:0a:50:c9:01:7e:25:5e:
f5:ee:88:d5:8d:a5:00:82:82:92:5e:ee:56:52:a3:
ec:9e:fa:1e:49:3e:90:d7:00:30:36:c7:fa:3b:af:
ef:cf:f2:2d:76:cd:7e:0b:06:97:66:89:a6:66:bd:
10:4a:95:65:44:e6:c6:4f:b6:c7:d0:aa:62:44:55:
f8:b7:85:b2:97:5a:c7:a6:8f:1f:a2:ce:6d:b5:95:
76:c6:0e:8f:ff:ea:6a:c1:6f:5c:e9:2a:4f:e6:80:
5f:63:22:bb:89:55:c1:ba:6e:fd:71:3c:50:76:39:
c5:70:47:7b:cc:2b:db:88:fc:80:bd:40:18:a3:ab:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:67:17:AA:07:29:07:84:15:D8:32:6A:DE:3A:CA:54:A4:E9:3A:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1000::/40
Signature Algorithm: sha256WithRSAEncryption
12:51:51:49:e9:2a:4e:aa:84:7c:6d:05:9a:b2:ad:45:22:9d:
6d:00:44:86:ad:4a:c1:21:33:f0:f3:8f:18:d6:e0:44:ed:1e:
13:22:65:a6:de:22:08:1e:1e:01:90:be:5a:6f:20:2c:78:40:
55:38:a9:90:47:4d:a1:62:75:dd:cd:e5:e1:05:fe:da:80:f0:
ea:c1:2a:cb:be:ea:6d:1b:a6:aa:66:98:c2:52:19:47:28:9c:
9a:06:8b:11:3d:23:d5:b5:df:62:0a:f5:f7:e0:23:49:79:33:
4c:0d:8c:5a:cf:6f:b5:db:2a:7c:a9:38:bf:23:c0:a3:ca:0e:
71:c1:5c:b7:0e:0b:aa:99:c8:a3:32:6e:ca:af:32:e7:cf:81:
74:f0:c6:e2:d3:31:ae:58:6f:cf:23:bc:9c:cf:55:aa:c0:a3:
4e:32:8e:58:37:50:f6:3f:b3:97:56:42:57:9a:2e:7d:e8:5d:
2f:65:99:7b:9b:03:b2:1a:33:49:08:49:a3:b4:ed:f8:83:2f:
15:07:b7:5e:8a:c1:7d:9f:d3:92:60:03:f9:93:e8:48:6f:b8:
f9:13:59:42:76:c7:01:96:d5:f6:74:0e:3e:f8:50:6f:ea:41:
1d:cf:51:c5:c2:d1:e4:0b:db:2a:fe:78:4e:c0:5a:97:9e:c9:
ac:01:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:33:41 2025 by rpki-client