Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5baa4ff-ac5d-476f-a428-fb66fb294867.roa
File: b5baa4ff-ac5d-476f-a428-fb66fb294867.roa (raw, json)
Hash identifier: WhArINrc5zxqqFSiGOWOy5y2TZ7HqQVlfEmFseHaDFc=
Subject key identifier: E9:71:9C:07:A9:C5:3C:EA:DF:E5:30:98:E0:DE:CA:EC:BC:BE:E0:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12C7C6F1CC539EAA4CD23E8A362785D984E0AAE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5baa4ff-ac5d-476f-a428-fb66fb294867.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c7:c6:f1:cc:53:9e:aa:4c:d2:3e:8a:36:27:85:d9:84:e0:aa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=df439607b66b229fa21ad3b48e4a48563fa1bfd073f30a7d74e107eba234601a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:04:1f:d6:76:df:b8:ac:e0:37:cd:ce:87:
d5:8a:c5:b9:d6:01:57:5c:3f:2f:f3:e8:56:df:4f:
18:dd:cb:9c:1f:02:d9:ac:a2:d8:45:73:d9:9f:95:
12:f6:dc:ef:c3:8f:1a:3d:dd:f5:26:59:a6:7e:e7:
f1:dd:f9:d2:51:2a:b1:cb:3b:2a:b5:3c:d1:59:a6:
e0:93:36:3e:a9:09:83:75:91:f4:69:3e:ab:4e:d8:
ec:7d:87:17:8d:50:b9:b6:e5:5a:37:d9:61:bb:bd:
05:b8:2f:af:1e:fc:46:13:f6:14:f9:52:16:34:76:
b1:ca:64:37:3e:49:35:d8:8f:39:be:ea:67:6e:12:
74:a9:74:ea:f1:39:60:da:70:10:17:70:22:27:fe:
34:12:e9:f5:4a:1a:43:dc:79:32:43:39:f5:40:3b:
72:ff:b7:c2:a2:83:7d:24:f7:7b:9e:33:fb:74:94:
0d:e3:bb:d4:68:df:ea:bd:82:83:66:56:10:97:5c:
95:fd:a2:e6:11:63:f6:97:32:b4:38:a6:ef:74:27:
7a:ce:0f:52:f7:a1:b9:b1:94:08:58:c2:60:a2:83:
35:eb:7e:b5:84:a7:7d:35:40:c6:0f:9b:46:d2:e2:
f9:df:1c:d6:f0:0b:87:c3:55:cf:63:e6:f2:4e:89:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:9C:07:A9:C5:3C:EA:DF:E5:30:98:E0:DE:CA:EC:BC:BE:E0:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5baa4ff-ac5d-476f-a428-fb66fb294867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a0:78:20:de:9a:cf:3e:09:89:61:ee:ad:c6:cc:aa:46:e2:26:
ef:db:2a:6a:ca:e0:3d:79:f2:9f:b3:0b:b1:42:9f:5b:41:51:
78:b6:a9:7f:00:07:c7:a5:74:27:62:64:62:bd:27:9b:8c:61:
9a:7b:4f:7b:8f:af:da:e5:5f:3a:37:7e:3a:35:05:84:b8:96:
0a:67:13:6f:8c:34:e1:03:2a:fd:cb:96:50:34:1f:a8:04:94:
7f:cb:1a:39:d2:00:23:9d:ad:ee:5e:34:23:18:5d:b0:78:4b:
26:10:1f:dd:cd:04:70:2a:a1:b4:15:50:f7:2e:f5:49:12:1d:
1f:94:2e:5d:d0:1b:25:3b:cb:9c:2a:54:61:27:65:fc:df:25:
d6:e7:4f:78:1e:fa:7a:39:31:d6:7c:b5:9a:ef:67:a0:44:4c:
bb:bb:46:ee:45:6a:2c:48:40:25:25:f1:02:d5:ef:fa:8e:ae:
57:8c:e2:6f:bc:10:cf:cc:0d:fc:3c:ae:a7:66:2a:78:45:69:
56:b9:c7:a1:f9:8b:6b:59:84:2a:92:e0:09:46:8c:8a:fb:17:
58:01:2f:0e:38:a5:6a:fd:19:b1:db:14:af:1c:ad:11:fd:f6:
27:cb:ca:b3:4d:28:8b:8b:7d:a4:a2:60:c1:94:dd:f9:79:24:
b3:c2:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:54 2025 by rpki-client