Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
File: b8a24699-2493-4e45-8227-bd2ec32f88ab.roa (raw, json)
Hash identifier: I+Cl94Ssl/IN9Pls5FCD/lsdM0VB2/f8tn8d/vfyV3I=
Subject key identifier: CB:32:E4:EA:B6:6F:09:77:64:0B:DF:D7:D8:61:8E:14:71:96:E5:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02DEA5572DC494CBB9F2562D99B13BD0A867B5BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:de:a5:57:2d:c4:94:cb:b9:f2:56:2d:99:b1:3b:d0:a8:67:b5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b8eb40660cb01acc50ad3171cccd47674f72d514ce793c138618eb01e96f8873, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:96:88:86:f3:d3:6d:e5:b9:98:03:8a:38:
0f:12:14:35:66:a9:0c:f3:d4:7e:c5:eb:22:98:4c:
71:f1:61:11:d9:72:2c:c3:60:84:2f:15:81:a6:72:
d3:fc:a3:33:88:54:d4:78:f9:0b:3a:fe:7b:b4:47:
cc:ad:7d:22:ca:98:3f:2e:b4:e0:56:f6:08:5e:c8:
f7:63:6e:3c:25:ae:0a:36:88:44:b5:87:ca:7b:0b:
7c:bc:59:a9:27:49:c8:c6:9f:ac:52:6a:03:c5:7a:
8f:ba:2f:ae:8f:16:34:66:9b:8b:c7:ab:e5:8e:b9:
f4:8e:5b:24:73:01:d2:d5:82:96:f2:02:22:13:7f:
e8:ab:13:04:f2:e4:87:f6:1b:3e:da:36:ed:fb:f7:
4a:b8:a7:67:07:f1:01:03:50:2f:e4:62:76:57:ef:
12:1b:f2:e5:ee:5a:e2:8d:7e:ab:26:04:fb:a8:18:
40:62:3f:3a:e5:fc:c9:a3:00:ec:1e:95:f4:ea:79:
f6:bc:84:14:6f:5e:bd:fc:ea:fe:bf:d5:dc:9a:0d:
8d:2a:c5:2f:55:71:13:90:e5:f1:c5:58:0d:c9:af:
9e:b1:e9:9e:ec:02:f8:9c:e7:9f:19:94:59:0d:8d:
f9:df:39:b0:7a:b6:08:81:19:b5:5c:82:7a:2c:3d:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:E4:EA:B6:6F:09:77:64:0B:DF:D7:D8:61:8E:14:71:96:E5:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e9:9a:f5:0c:0f:3f:3e:56:e7:cd:da:b3:a5:f9:5e:b0:05:
9d:c9:a7:1f:b5:8b:8a:59:c0:ac:87:88:4c:6a:12:d9:63:13:
51:ce:74:db:b0:24:65:5f:65:42:e6:fc:46:d6:b9:c6:c0:eb:
01:5b:7a:44:2d:63:be:81:2e:62:c8:5e:2a:5d:31:2c:1f:f4:
2f:d6:88:aa:20:95:54:8a:55:1a:49:c5:07:04:42:f1:b5:79:
43:13:20:24:97:e2:e2:5d:78:1f:c0:8c:26:05:00:4d:78:72:
79:25:36:6e:a1:db:d6:a6:93:ee:e3:67:09:a0:22:f6:3e:6f:
10:7d:15:b6:fb:6e:fe:41:18:0a:d6:27:60:8d:4c:53:14:cf:
a0:4d:29:49:be:11:61:b8:81:d7:80:23:7a:69:6b:e6:3f:45:
20:f6:a9:d5:cb:06:5d:29:68:4f:0b:80:3a:f5:16:2e:e7:58:
04:d1:da:0d:5c:52:a0:a5:6f:4b:82:da:bf:12:18:b4:c4:0a:
d9:d7:52:c2:a2:90:0f:f6:87:e7:90:f7:32:d3:2a:a4:4d:9e:
d7:eb:40:fa:0f:ad:19:0e:29:72:fa:71:5a:59:3a:d1:fc:95:
d8:17:5e:d1:2d:f5:a7:0b:28:0b:d2:f0:bd:71:63:ec:bc:3b:
f9:39:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:58 2025 by rpki-client