Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
File: aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa (raw, json)
Hash identifier: mW9zKCfD0Cnwrejt74pxwP0vhM1Z3u4Ksuagw+8exYo=
Subject key identifier: F7:EC:C5:3F:6E:FA:50:BB:BD:C8:0B:AC:21:2E:D7:26:87:C4:75:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60D57AD9491968F5DC35A6365FC380090A3015BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d5:7a:d9:49:19:68:f5:dc:35:a6:36:5f:c3:80:09:0a:30:15:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ad52cd61e2da91932e7dff8a521c015c3eb3f5a354558621f5dbbcd46e443985, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:bc:13:53:aa:22:9d:13:cd:a1:7f:52:c4:
91:27:dd:c3:49:d6:ab:83:2d:68:03:25:d0:df:f7:
54:e9:a2:18:3b:1e:a9:94:15:98:89:6d:b2:4e:ad:
8a:f8:d2:2c:91:34:1a:a0:81:c3:e8:f8:fa:3e:55:
a9:4c:c2:0b:8f:8a:a8:2a:99:de:0d:f9:f5:3b:a7:
e3:a3:f7:60:c4:8a:23:4a:af:06:12:2a:24:cc:c1:
29:aa:1e:6e:06:62:5a:bf:6f:f3:f8:20:61:d7:ba:
b2:fe:01:4e:81:3d:53:08:7b:4d:05:c2:4a:99:de:
b2:50:b1:0f:98:93:3f:08:41:f5:d2:ab:1d:24:f3:
aa:10:26:dd:c0:88:05:82:80:04:13:86:09:16:e5:
ad:84:94:64:3c:6f:44:29:40:ae:da:94:7f:11:6b:
32:0d:bf:8d:e0:12:73:5a:01:8f:9a:17:67:c5:dd:
e7:4d:cf:d3:55:3f:ba:81:58:68:90:56:83:5b:43:
74:1b:02:a3:91:4b:ac:a0:80:30:c9:b6:f0:b8:36:
99:75:fb:eb:60:15:eb:fd:5a:35:d6:25:ab:fc:0e:
64:c5:e1:8f:fc:dd:3b:c0:f5:ed:57:a2:b1:38:c6:
4c:e9:7b:b6:e1:82:94:4f:45:a9:3b:31:0e:5a:f0:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:C5:3F:6E:FA:50:BB:BD:C8:0B:AC:21:2E:D7:26:87:C4:75:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9080::/48
Signature Algorithm: sha256WithRSAEncryption
1c:7d:f8:89:69:75:8a:76:2e:65:68:7b:e9:1f:d5:83:2f:98:
8e:5d:9c:76:a9:66:41:57:12:81:3a:74:1b:0c:c7:12:86:51:
9f:8a:3c:ff:72:46:90:e3:ab:a9:33:59:ec:a5:5f:33:e9:08:
24:5c:dd:f0:b8:dd:22:6a:f3:5f:64:7e:b7:9e:c2:a6:32:b1:
10:7e:17:a1:d1:5c:69:7e:14:a3:b8:18:9a:72:52:3f:51:8d:
53:32:b3:ca:d8:bd:90:4f:61:04:3e:d8:a2:93:76:d1:5b:53:
6d:77:b1:b6:43:df:d4:46:30:49:26:f8:d1:60:e5:47:b0:db:
e7:6f:94:26:e4:ec:fd:96:fe:f1:44:28:96:be:6d:91:76:8c:
37:a2:97:92:3b:86:62:ac:06:99:76:9e:4b:7a:ed:95:3d:e6:
40:a1:4b:b5:7a:76:c2:53:35:61:ed:ca:f5:ce:ed:91:95:fc:
22:b0:71:3b:18:a6:ae:c4:82:aa:4b:ff:7a:15:44:8e:4b:5d:
90:06:b3:2c:d0:75:d4:0b:54:e9:cd:1a:a3:e3:bd:40:44:a4:
da:1c:97:2c:2f:1d:db:9b:41:b9:6f:34:46:f1:5f:dd:9f:36:
ee:4a:f6:4c:7b:8a:cb:3b:ba:15:60:83:56:88:73:e5:da:ff:
eb:24:ac:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:45 2025 by rpki-client