Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b01a5a70-e8bc-4c88-8f86-597d891eae77.roa
File: b01a5a70-e8bc-4c88-8f86-597d891eae77.roa (raw, json)
Hash identifier: fEyzewawAmAh6RnuN3TEDvzZGHcXhoSwZOV074fGs+4=
Subject key identifier: D8:A7:F5:25:87:48:87:EC:96:96:33:59:C0:14:D5:F0:57:C9:16:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 045A1BBE4DC66BA06AD2BAFFE9D02679A6A0407E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b01a5a70-e8bc-4c88-8f86-597d891eae77.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5a:1b:be:4d:c6:6b:a0:6a:d2:ba:ff:e9:d0:26:79:a6:a0:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3560fa544f8bdb475d27cd2bf766407ebfd41a7eb61ffeed821626694052fbb1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:4c:ad:f9:ab:7b:61:c6:83:9c:af:21:f5:
66:0f:3e:00:24:55:d3:ae:15:93:8b:05:42:19:3b:
0e:4f:83:bf:8d:0c:f9:12:4a:48:e0:81:6d:62:30:
3f:8f:c9:3d:73:4c:1e:66:33:79:d6:f0:26:5d:7e:
c7:dd:c7:24:02:eb:ce:c0:07:1b:f1:a7:30:d1:af:
f1:c2:f7:25:cc:52:cc:32:65:61:98:4d:ad:ca:a8:
bb:67:b4:36:d9:04:78:d2:88:22:de:b6:28:78:99:
a2:af:f1:ed:36:6b:16:47:52:1b:d3:b6:d8:0e:7b:
2f:b9:42:8f:52:73:23:04:18:1e:02:14:3a:95:3b:
98:9b:63:1d:ea:1d:e4:ef:72:bd:4f:bd:37:ed:c2:
9c:a4:50:43:47:d8:de:8a:f4:50:1e:a9:1f:9c:2a:
6b:78:67:22:56:2b:31:0c:43:e1:34:65:51:0e:00:
c8:62:78:ac:ab:37:f8:7a:cc:cb:b0:ec:b6:ff:47:
82:10:b5:ae:26:1c:ed:72:8c:af:a1:55:a3:e5:be:
aa:ce:5c:a4:66:08:dd:44:25:fb:62:bd:79:1b:48:
22:8b:85:51:b4:17:5f:7e:23:61:70:8a:9e:86:6c:
d6:f1:24:5e:bf:3c:d1:ce:78:d1:3b:3b:58:d1:21:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:F5:25:87:48:87:EC:96:96:33:59:C0:14:D5:F0:57:C9:16:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b01a5a70-e8bc-4c88-8f86-597d891eae77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2080::/48
Signature Algorithm: sha256WithRSAEncryption
41:f5:1f:a4:47:a0:01:0a:39:89:77:fd:f9:12:b6:5a:2f:42:
2c:28:68:66:a9:e7:c8:4c:0b:c8:5f:4f:8a:c6:0d:c1:06:d8:
ff:31:46:4b:05:e2:8d:e7:c9:d8:d8:43:32:4b:8d:0a:38:d6:
63:bc:cd:24:75:3c:66:6f:49:48:ef:13:a6:dc:16:33:84:53:
f8:c3:2c:4f:b8:a8:a6:55:a2:eb:c1:bd:4b:d5:47:8d:4e:cc:
26:52:45:3c:ac:8f:6d:85:60:eb:37:4a:bb:fd:5e:ed:69:36:
26:44:52:7b:7f:7c:b6:9c:3a:2a:db:fc:3a:c9:8c:22:9f:e1:
00:cc:9b:46:45:af:a2:ff:d0:06:32:3b:e6:84:ce:07:0d:e5:
4e:38:f8:ec:ad:c8:8d:f9:27:f8:36:02:10:ea:e9:f7:4f:3a:
31:e4:d4:04:69:14:49:c2:a2:8a:39:2a:2a:3d:5e:fe:aa:07:
96:1a:6e:52:ea:b0:50:40:a9:24:81:e6:3b:45:0e:22:36:1c:
6d:43:65:1a:18:78:09:23:31:ab:a5:9a:22:54:ef:29:b6:be:
a1:d5:65:3e:f8:d7:13:3b:eb:61:05:2c:17:14:81:97:09:ae:
58:9e:69:c5:f2:a1:c9:b5:7e:1c:71:e8:78:66:ee:6e:14:42:
87:ba:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:38 2025 by rpki-client