Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b61f858a-31b1-485a-8ced-0c328ce9c4e3.roa
File: b61f858a-31b1-485a-8ced-0c328ce9c4e3.roa (raw, json)
Hash identifier: LZo1fZxJnJE9Pc4V4PJwYPd6m0mWaR/9CfyR/rsXKE4=
Subject key identifier: 82:90:76:37:5E:52:61:58:E4:99:D4:B7:C3:FF:81:C3:06:87:6B:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07F4B7A7BB68D91040298B24D143D7A6416D1282
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b61f858a-31b1-485a-8ced-0c328ce9c4e3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f4:b7:a7:bb:68:d9:10:40:29:8b:24:d1:43:d7:a6:41:6d:12:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=13bd9c4357db0cd92b97b512c62110cdab41b31d2d0b4c352d16f18f45e5f664, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:32:f8:e7:34:20:18:de:02:fd:6b:81:2f:
14:00:82:53:59:dd:eb:1d:4c:de:c7:63:e5:24:52:
b8:7d:ec:15:b9:c6:07:0e:30:6e:ec:3c:d3:5f:54:
84:e8:92:f0:95:e6:7a:a0:b8:d7:99:e3:75:11:f1:
ba:6f:bc:5b:a9:5d:6f:d1:57:ab:c6:5c:a9:ae:01:
07:ac:a1:b7:1d:96:ec:e1:d2:83:3a:8c:bb:ec:40:
a2:49:24:0c:0a:dd:ad:6a:f5:db:b0:c2:f6:2c:90:
85:e9:0b:5d:21:d3:d2:71:2b:b8:97:20:cc:5d:bd:
cb:16:af:dd:6f:33:00:95:c1:c3:f1:b5:c8:b2:07:
25:b4:a9:5d:7b:81:3e:44:0c:e7:cc:b9:66:8e:80:
f0:17:e3:3f:61:3d:c9:3f:85:b1:99:9f:a3:55:ab:
e9:8e:0c:2d:9d:e0:da:15:ab:c2:1a:73:11:26:53:
6b:d1:fb:f5:e3:6f:19:6b:a4:f1:7e:50:b5:bf:98:
25:b7:67:03:20:7b:26:ca:3c:04:d5:95:a1:45:af:
d2:21:a9:08:24:cc:43:1d:d6:7d:ee:f1:51:46:49:
29:2a:5f:0e:0b:8d:df:90:3e:46:f8:cd:c6:23:d6:
0b:60:3b:6b:f2:81:45:83:6d:59:5d:e8:25:14:7b:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:90:76:37:5E:52:61:58:E4:99:D4:B7:C3:FF:81:C3:06:87:6B:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b61f858a-31b1-485a-8ced-0c328ce9c4e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
68:2b:db:01:d1:dd:e4:5b:56:b7:cd:e2:cb:5f:88:8e:99:38:
aa:78:4a:e3:c1:4b:59:8a:e4:fb:79:a2:bd:61:03:54:4b:72:
ff:ff:92:48:fb:13:80:69:3a:2d:1c:85:58:56:b9:b1:4c:31:
a4:0f:46:cb:af:27:a6:df:96:a0:20:68:5f:55:9d:e6:2e:0d:
3f:f0:30:da:df:22:bb:bb:5d:a7:95:2b:70:fd:04:87:85:da:
fb:ad:de:b5:f0:9b:e5:36:14:13:c2:03:b0:1b:21:a7:c7:1c:
35:cd:11:ab:fe:c9:88:95:d3:c2:11:0b:dd:5a:5d:bb:ab:9c:
c4:f4:09:38:d7:74:64:ef:df:f4:bd:5f:26:6c:8b:0a:d4:af:
16:29:84:b1:56:fd:94:e4:29:58:f7:04:3d:e9:80:1a:00:c0:
2e:f8:3c:98:10:3e:32:2c:30:5f:55:f8:a6:89:2c:d7:11:2c:
0c:77:7b:78:0c:41:9d:89:2a:2a:73:5a:04:f9:a5:a7:37:8e:
7b:58:05:fe:53:cf:3f:b9:36:d0:56:5f:11:f9:1f:74:28:bf:
c9:27:06:19:2a:97:f2:be:91:b0:7b:13:4f:c5:00:54:bf:62:
04:0c:b3:48:1b:0c:26:13:03:ce:bd:27:ec:83:87:5e:b3:35:
8b:d2:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:33:34 2025 by rpki-client