Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
File: b0fb422a-c1ce-4269-b503-2c8145fc798a.roa (raw, json)
Hash identifier: ua6zfdpBe11SjHTvVSH18SJNgytUmdAg1de4Mm54gTs=
Subject key identifier: C5:CB:07:E8:EE:30:6A:27:8A:1E:F6:A5:4B:E0:A3:AA:8A:0A:B6:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53C2E75158D466C5555F84C495A902DD313B2598
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c2:e7:51:58:d4:66:c5:55:5f:84:c4:95:a9:02:dd:31:3b:25:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4c32779c29a769266e203efedbe19356aa0adc1c1747e06f3537fcd3f28ae14b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:5d:4c:a3:e1:bf:1d:a0:63:e2:18:36:f3:
08:e8:40:e9:01:85:19:45:a8:51:12:a7:5d:75:97:
dc:da:f5:f1:55:d4:d9:de:d2:5e:99:e1:40:4f:9e:
6a:5f:12:dd:54:e3:c0:09:f8:2d:0e:a3:fa:ab:60:
b5:5d:50:95:4d:96:db:94:63:86:ae:cb:c7:c7:58:
12:28:d0:fe:1d:e9:1d:9e:87:c8:c2:f3:21:f2:f2:
8c:d9:55:58:89:88:c2:0c:6d:ea:9f:d0:61:00:c8:
66:bf:03:45:10:5f:8f:5b:38:12:d4:73:cf:31:94:
14:a1:b0:c2:02:f6:c4:1e:a1:2d:24:2a:f4:58:24:
b5:04:21:18:f1:b3:b0:3d:89:66:d4:16:35:4a:46:
53:f4:90:f6:e3:8e:34:88:e4:7b:99:c5:f4:21:92:
72:ba:99:ba:e8:67:35:4d:18:29:73:af:c5:e3:25:
87:4b:e9:f0:76:4c:86:fe:39:b4:c8:84:75:f9:9d:
d7:f2:cc:06:c8:07:88:93:35:9a:93:c6:e9:65:62:
ee:80:3b:ed:2e:62:d4:1e:a4:17:45:a7:f9:e0:e5:
42:7d:37:a3:e7:c4:9c:09:c4:fd:6e:28:0c:ff:b2:
3b:a7:84:f8:a1:97:cf:85:36:3a:92:8f:38:3a:09:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:07:E8:EE:30:6A:27:8A:1E:F6:A5:4B:E0:A3:AA:8A:0A:B6:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a020::/48
Signature Algorithm: sha256WithRSAEncryption
34:a3:c9:06:f9:96:a3:f6:17:5f:a8:5b:7f:90:a9:04:e7:b4:
77:4e:19:a9:bd:4e:c5:0d:c0:29:2e:9f:9f:17:3e:4f:04:c3:
ef:95:bf:cc:ec:78:4e:cb:c0:ed:97:ab:85:4d:f8:56:6b:aa:
2c:31:12:81:04:7b:13:12:e6:19:97:7b:9f:3a:d4:2d:20:0b:
59:7c:ec:10:01:8a:6e:4c:97:4a:d4:89:00:20:59:28:49:ac:
7b:c1:c7:3e:ff:6b:1d:59:a4:5b:c8:08:08:9d:dc:39:cf:dc:
bf:87:4e:be:11:2a:98:33:12:32:5c:e7:a4:90:fb:11:8e:08:
de:23:39:86:dd:16:53:eb:14:c6:7f:e4:19:c2:5a:7a:57:44:
c8:4e:66:48:56:66:f0:40:81:1b:36:96:ab:a0:90:d7:45:fe:
06:3a:f3:17:cc:e2:5d:a2:4b:f4:03:5d:91:37:f8:92:da:21:
96:f9:c3:72:e2:ad:98:7d:29:1b:68:46:fb:24:b9:be:81:4f:
8e:55:91:db:48:56:d9:33:cb:4f:1a:a2:66:d8:12:76:28:fe:
15:d8:37:35:00:f0:ca:30:ea:80:b8:fc:34:c4:74:c7:81:b7:
38:25:f7:91:27:94:be:3b:75:2a:c1:e3:e7:a4:bd:00:b8:e8:
59:42:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:35 2025 by rpki-client