Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1f621df-4a61-486b-97cb-dcf1d992e048.roa
File: b1f621df-4a61-486b-97cb-dcf1d992e048.roa (raw, json)
Hash identifier: tl1nZ81qbdcCbXce+39OqkKaBk4u98Ejgj7SQ0sfbcY=
Subject key identifier: 00:83:F0:DD:2B:B5:48:E9:C7:0E:7F:00:AF:85:80:0E:B6:64:A6:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5542568042639AED9C391604347859D250D0FAC0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1f621df-4a61-486b-97cb-dcf1d992e048.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:42:56:80:42:63:9a:ed:9c:39:16:04:34:78:59:d2:50:d0:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=99d80aa58715d3adb917623951dd5ad4f7b6ec06557d0d7b3116524ab20386f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:83:93:b7:3c:d9:f3:b0:8b:40:07:0a:b0:
34:e0:56:83:dd:c2:4f:71:f8:e3:73:07:7f:ce:7a:
02:19:59:e4:16:58:ef:57:ce:1c:3e:ed:35:04:8e:
4b:3c:d7:c3:6b:46:2a:a0:56:95:66:9d:96:7f:4b:
7b:dc:9d:de:a5:05:c1:e3:75:b4:a9:ef:c5:67:56:
3a:b0:82:fa:9a:89:e8:42:cf:23:5b:47:66:1e:be:
4e:8c:e6:2c:b6:d7:09:37:bb:d4:33:06:5c:9b:01:
29:4c:5a:1e:22:1d:91:25:f6:ce:dd:ca:b2:1d:51:
a7:d9:80:82:2a:6c:bd:a3:07:65:2c:f6:19:84:54:
eb:23:48:de:b0:0d:bb:0e:cb:81:ea:96:ac:9c:d5:
b2:b5:2a:6b:e6:bf:ce:21:c1:b1:53:67:74:00:d0:
0e:6a:fc:ad:f6:33:b7:d0:16:49:64:a8:62:f1:c0:
57:95:cd:fb:8f:15:c1:d1:66:ae:d5:19:b7:21:0a:
85:43:d8:95:01:82:03:f0:99:cf:77:69:c1:ad:c7:
cb:dc:34:fc:ee:0d:82:ce:b4:18:f6:5d:07:90:27:
dc:02:85:3a:5e:b0:b7:2c:23:42:c7:e5:10:98:ca:
f5:3a:81:fa:ce:98:34:8c:d1:b7:d2:4b:a1:ff:54:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:83:F0:DD:2B:B5:48:E9:C7:0E:7F:00:AF:85:80:0E:B6:64:A6:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1f621df-4a61-486b-97cb-dcf1d992e048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:8000::/40
Signature Algorithm: sha256WithRSAEncryption
76:5c:87:d5:7b:86:b8:81:32:81:b9:47:12:63:b3:3f:df:ff:
92:95:fb:d0:97:bb:10:ef:45:c2:6f:07:20:90:6e:ce:51:f5:
0a:02:53:04:58:13:47:91:6f:c1:c0:17:12:99:c5:6e:f6:ec:
d6:34:2f:27:c5:6f:bf:50:ae:6d:30:62:2a:2e:de:cd:0d:fe:
52:77:87:3b:33:aa:d5:4e:1f:f6:34:46:a9:46:71:a1:de:61:
07:30:47:02:1a:5a:c2:88:0d:9a:30:58:76:e8:14:47:f9:d8:
2a:38:6a:2a:11:f4:76:68:b6:73:98:9b:d8:9e:2e:6d:11:b2:
b6:b7:68:f4:c1:05:9f:71:2c:7a:62:26:39:e1:6b:b3:42:c7:
df:b1:2f:a5:ec:5c:24:91:e8:2f:aa:a6:23:fe:d8:aa:66:ed:
a4:18:36:72:ae:4a:17:32:a3:65:85:ea:d3:2f:f7:e9:50:1d:
18:ab:8f:20:de:88:99:60:23:e3:9f:c2:e2:bd:9d:0c:70:86:
92:97:2a:40:83:ad:3a:82:53:72:40:aa:ab:ba:94:51:6a:65:
f5:6d:01:72:e3:60:ac:df:a1:9c:e4:89:6c:4a:52:04:97:e4:
2b:26:37:ae:c2:b5:5a:26:15:32:35:95:1d:4e:d2:ec:d9:72:
f5:f9:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:12 2025 by rpki-client