Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7d242ad-482b-4700-888a-b677a178a4bf.roa
File: b7d242ad-482b-4700-888a-b677a178a4bf.roa (raw, json)
Hash identifier: FKMSmsQL+G4Mr4SQmMFZZfz7oBjfM9qU+YHhx5PZFXQ=
Subject key identifier: AA:70:4A:04:13:F3:BC:CD:68:1D:EC:BC:AF:8F:27:C2:03:13:F6:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4AC48A1FD775EC718F62916C8FB010A93B7644A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7d242ad-482b-4700-888a-b677a178a4bf.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:6080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c4:8a:1f:d7:75:ec:71:8f:62:91:6c:8f:b0:10:a9:3b:76:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=846de3607187cf40b7adf7ac2c850067129d4123d17045a079355733d7b35c23, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:92:57:82:62:d3:7d:f9:7c:b3:6e:18:71:
ca:99:d7:b9:de:fc:16:04:cc:37:b7:74:d7:27:73:
ac:f5:92:12:9b:f1:6c:59:45:ad:5f:97:f6:f8:3e:
4b:f3:ed:0a:f6:7f:83:fe:fa:94:54:3d:b7:33:0a:
92:a8:81:8d:cf:9a:93:66:5f:6c:30:3b:21:fe:6e:
d8:2c:0e:bc:9c:f7:4f:60:03:99:ee:1c:e9:37:80:
09:35:b1:7c:ef:98:06:2f:88:cc:0d:da:4b:5d:23:
b5:b7:98:2e:08:84:6e:18:d8:a0:5f:49:ba:a6:44:
1e:4c:fa:5b:27:67:54:52:e0:32:f9:ed:22:79:79:
59:b8:a7:29:80:eb:07:34:b2:1d:be:30:a3:0c:93:
9f:d6:99:bf:6b:c1:b6:ed:a3:30:19:02:c2:57:b6:
8b:b9:b3:6c:10:24:6c:aa:01:0e:dc:ec:74:9a:f3:
36:7f:81:6c:24:16:a1:1f:d9:11:09:45:26:c1:1d:
89:5f:85:30:0c:9e:19:5e:1e:63:17:f7:3b:1b:7c:
ec:ae:f9:41:94:ed:a3:50:5d:92:29:f2:b4:e9:e7:
c6:11:a3:a7:b0:15:bf:f1:ef:71:c8:88:4f:18:05:
80:aa:7f:fb:ba:d9:c1:fe:ee:eb:b9:a9:ce:62:67:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:4A:04:13:F3:BC:CD:68:1D:EC:BC:AF:8F:27:C2:03:13:F6:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7d242ad-482b-4700-888a-b677a178a4bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:6080::/48
Signature Algorithm: sha256WithRSAEncryption
b3:12:e2:92:21:42:89:bc:ba:b4:ae:e2:a2:ab:a9:dc:c9:fe:
3c:9e:43:9f:48:9e:71:7c:0d:37:19:67:22:d7:04:8f:67:82:
e5:73:d6:e2:ac:ad:b2:7a:95:73:fe:0b:2e:6c:21:e3:38:d2:
af:93:eb:10:72:95:b4:23:11:d8:ff:8a:3e:5d:4e:cb:ab:94:
84:c7:60:fd:eb:45:68:24:e4:30:79:92:80:8c:ba:01:9f:46:
7c:76:f4:d9:76:68:dc:96:6a:8f:8a:89:10:34:1c:38:b0:3f:
a0:e8:71:a9:da:38:40:8a:b2:cc:72:f1:6f:7d:ad:c0:48:8a:
ac:61:d8:12:46:98:ba:e6:c9:6e:c8:5b:9b:62:db:aa:3e:5a:
ef:f7:4b:04:0c:af:db:23:d3:78:5a:90:96:38:c8:8f:52:d6:
67:0c:85:98:00:f0:ec:7b:6a:c0:31:ba:0c:ce:ea:a1:5f:03:
9e:65:49:03:d4:7a:5f:09:f5:cc:8a:11:f7:71:f3:68:55:73:
e5:a9:6f:ea:e5:d7:b9:17:cb:c1:4b:8c:c8:d7:e3:e4:fb:3a:
c7:6f:7b:c7:a0:66:ed:d1:37:57:60:5f:13:8e:b8:f7:32:9c:
16:1e:62:af:32:4e:1b:9b:cc:1f:aa:f7:f5:0d:a9:8e:44:fe:
17:cd:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:15 2025 by rpki-client