Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
File: aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa (raw, json)
Hash identifier: WvTKt5n0GDoUOSg3oKFAlMX7FGPtoF4J3eovzzuLY1Q=
Subject key identifier: 01:40:6D:3E:60:42:B9:D2:DC:19:7B:C3:A2:45:7B:AB:DF:A4:81:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50A15EE2023C18230A4A61540F49E87242A3E0DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a1:5e:e2:02:3c:18:23:0a:4a:61:54:0f:49:e8:72:42:a3:e0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7648ec44811f7a2943ea4ff67d1cc22c6282abe270488ba38f732ce5079ccd36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:02:77:f3:aa:48:09:f5:59:ff:b4:03:41:
41:b8:97:31:59:16:c1:e7:29:d8:e7:6e:cb:c0:e7:
81:6b:df:9e:d8:33:79:e4:ea:9f:c3:74:52:f0:e8:
d3:50:cb:0d:bc:9b:8b:bf:f7:b9:db:b6:5d:d7:46:
ae:ec:ca:26:b2:8d:95:0c:6c:9d:f6:dd:85:73:3d:
73:e3:22:3e:18:10:ae:b6:52:dc:11:0f:31:4c:4c:
46:d4:e0:67:dc:92:f0:24:e1:e8:b9:8b:5b:56:1c:
db:13:b0:27:a9:b7:03:24:07:6c:52:e0:4b:cf:f5:
f1:ed:82:12:9f:ad:46:3d:08:af:41:ab:ca:7d:f1:
8e:26:81:41:3b:df:69:3a:e8:82:df:61:66:a2:e8:
06:df:31:c4:a9:1e:cf:19:7e:ea:ab:d5:97:ad:8e:
d5:4a:e9:8f:a7:c3:91:e9:b1:31:f2:08:aa:ea:16:
e6:2a:92:60:ac:c6:7f:cb:92:7c:dc:da:39:e0:3c:
12:67:37:b4:07:5c:4d:fd:2f:c3:d3:73:b0:dd:00:
8f:69:ed:dd:82:b5:18:1a:5c:fc:b2:bc:1a:fd:77:
be:96:31:1a:1e:af:f4:44:d6:5f:42:3d:ad:a2:e5:
33:b8:21:d0:10:d4:f0:ae:d8:b7:23:a7:07:7a:e9:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:6D:3E:60:42:B9:D2:DC:19:7B:C3:A2:45:7B:AB:DF:A4:81:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a080::/48
Signature Algorithm: sha256WithRSAEncryption
91:97:2d:16:93:9f:6f:4e:5b:20:d4:0e:bf:08:cb:dd:77:d6:
61:7a:02:ab:9a:cd:74:c9:8d:24:01:20:1c:0a:fd:0c:37:f9:
63:a3:71:04:88:ab:c0:0e:0c:29:7f:72:85:0b:1f:00:c4:b1:
a3:d1:c5:16:46:69:45:52:d2:a9:8e:52:ed:4c:4d:74:4e:f9:
ed:fa:eb:41:fc:4b:4f:c7:16:f7:4f:82:ea:ff:7b:dc:be:db:
ae:54:9d:59:65:84:b5:fd:8b:90:23:b5:74:62:78:d6:47:46:
aa:94:6f:2b:a2:20:dd:8e:9c:eb:a8:6e:8c:da:0c:c5:ed:9f:
43:ef:c0:69:2d:38:93:e0:2d:13:15:11:22:cf:97:2a:4a:1f:
2a:75:9d:d4:26:00:d5:9e:ee:00:8d:2c:ee:d4:1c:14:9d:f3:
0b:62:05:31:3a:1a:7c:3d:55:1a:3d:22:ac:30:4c:91:5d:a4:
68:35:d0:50:bd:7b:cf:d2:7e:77:01:36:2b:b9:8e:a7:cd:aa:
7e:ae:fa:59:02:9d:01:cc:dd:02:a7:42:73:54:8c:a5:6a:64:
9c:03:d0:49:28:0f:34:73:1d:f7:a3:cd:5a:ef:c8:d8:ed:59:
64:7d:0a:9e:33:76:d9:b6:2d:2b:d1:f6:14:04:bf:01:56:95:
e9:d3:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:21 2025 by rpki-client