Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: 5pKlHqdIt3VK14wQoHVOUdolP6VlfeaMvHaJFUOjvYw=
Subject key identifier: 84:F8:AA:C8:03:C2:6F:CD:4A:C9:42:59:3B:2B:B8:DA:D4:CD:14:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 256EC279EB4CF065D0E532A9AA59EFE9A7B2857F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6e:c2:79:eb:4c:f0:65:d0:e5:32:a9:aa:59:ef:e9:a7:b2:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4b483a2744ad0a65493a7d32cc317114e18ba74b867e226935801c1b9b05ec27, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:d4:0b:0f:51:27:89:28:8c:a7:ba:37:5e:
c3:66:52:c3:2d:f8:59:5a:8b:d0:82:aa:8e:92:85:
e7:d1:2f:de:09:89:65:e7:71:01:40:e3:6c:fb:f2:
b5:b0:f0:b9:c0:be:ca:83:26:61:7b:05:0d:46:c2:
5e:1f:ba:82:8f:e3:24:a2:de:fc:39:42:25:51:fd:
46:fc:6f:6a:32:70:f0:60:08:d3:ed:f9:87:58:e1:
cc:b6:da:7b:f4:e1:48:e3:e7:70:51:11:5e:0d:da:
ed:5f:1a:21:fc:6d:0a:1b:37:c7:f0:cd:75:0a:f5:
15:49:50:14:00:86:ee:ab:83:3b:98:51:fa:32:c9:
9b:17:f2:84:fa:c3:aa:d6:ac:a4:a6:17:8b:ef:3f:
c6:7a:10:72:c0:a6:89:96:5a:6c:59:59:95:8e:59:
08:d3:c0:8b:cc:ee:bf:5f:2c:75:b0:ee:dc:81:1f:
97:3f:fb:8d:21:c2:d8:c0:e6:49:d6:59:d8:99:b6:
f0:27:e8:f5:00:10:8d:3a:56:57:d0:10:39:43:06:
7f:2c:8d:25:e7:df:88:5f:2b:2f:31:af:64:55:35:
af:e4:ae:55:a2:5f:6b:8e:22:94:ae:4f:7f:e7:9a:
01:79:c2:c6:15:d0:a4:43:f2:89:5b:5b:75:0e:6c:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:AA:C8:03:C2:6F:CD:4A:C9:42:59:3B:2B:B8:DA:D4:CD:14:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
27:08:9c:dc:3d:70:41:13:9e:04:6f:34:fd:f3:67:ea:5b:63:
8c:8d:a0:6f:8e:f3:93:ae:a2:b0:e4:0f:81:d4:a1:9d:a8:33:
aa:74:a8:67:25:de:21:15:98:cc:04:87:35:b7:5d:f1:3d:94:
dd:7c:c1:0c:67:d7:d4:8b:58:27:97:75:78:65:c7:11:04:bc:
a0:1f:f6:ba:c4:6b:d1:4a:e4:f1:c4:b0:24:85:59:c3:2a:43:
8a:9b:4d:99:79:07:d0:7b:29:ce:b4:99:81:d0:25:e1:85:65:
91:26:ff:20:b8:04:33:f3:6b:50:8d:35:02:1d:88:60:b6:d0:
eb:b8:57:db:b4:87:45:fe:6c:6f:80:a0:11:5e:dc:88:3b:dc:
40:b2:d5:2c:02:b4:b8:26:44:3a:32:89:97:4e:88:64:59:d5:
86:2b:34:31:b2:af:61:10:a3:49:54:78:09:3c:5e:af:59:3b:
29:7a:86:57:e7:bc:d2:c2:4f:24:08:cc:2d:c8:b2:64:86:f9:
1d:79:7a:50:7c:2f:2d:aa:8d:81:31:cb:0b:57:d6:96:3c:a5:
d6:d0:c5:2c:c7:89:21:b8:93:78:b3:5f:71:32:9f:ce:9c:ab:
0f:19:b4:39:12:48:4a:fc:35:d0:ec:f3:be:69:ab:29:cf:df:
2b:5f:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:58 2025 by rpki-client