Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
File: ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa (raw, json)
Hash identifier: dAkRjtBmD/jQW2eNzqX7dIYzx8adS1OvqoXhwDEzu+A=
Subject key identifier: 6B:E3:50:87:EF:1D:B7:A9:1F:C4:BA:4D:99:D1:C0:5E:C7:AC:CE:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6645B9C2742AC4F64802F2AA75648275AC70FB0C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:45:b9:c2:74:2a:c4:f6:48:02:f2:aa:75:64:82:75:ac:70:fb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=02bd6d43156a148f9ddb2c20c565d2c4791389ee66a12ff0248d168ffa2c2a59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:ec:7f:44:21:fe:33:ad:fc:4d:f0:06:50:
af:d7:f8:62:df:41:ef:05:3b:e1:6e:0d:ed:97:ec:
b7:57:e3:5a:62:45:5c:58:0c:ca:d6:ed:2f:3a:e4:
80:70:79:91:41:79:bf:c5:5d:19:bf:df:c7:15:a0:
eb:b4:e0:dc:eb:4b:5d:5d:51:4a:4c:5d:0d:2b:26:
3c:4f:ea:6c:58:e2:ee:fa:b0:d1:1e:ce:05:98:ad:
2f:de:3b:c2:c7:83:50:12:78:a4:62:1d:ba:cf:a3:
5c:da:91:ac:c5:e1:27:df:88:2f:a7:2e:b2:96:5e:
3b:d6:1b:2d:af:57:b0:5c:51:67:12:24:85:ee:37:
cb:fa:4f:40:f4:c9:95:d3:a2:84:61:e7:f6:05:5c:
cb:dd:e4:84:8a:5d:a8:4e:e8:ca:02:95:39:91:f8:
49:07:b8:3f:87:97:a9:4c:2d:00:f2:b6:f0:2f:3d:
83:1c:71:94:82:61:80:a6:f6:00:80:34:c1:a0:34:
5c:6d:08:d0:0f:fb:69:3c:55:10:1b:e0:af:75:0c:
6b:83:f2:f7:96:54:c4:f3:ee:5f:97:9e:11:d7:6a:
44:1f:8a:28:3e:ec:b3:ee:eb:b0:ba:e2:1b:49:e0:
1a:97:dc:81:08:7d:88:23:a9:1c:3d:58:0b:f0:29:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:50:87:EF:1D:B7:A9:1F:C4:BA:4D:99:D1:C0:5E:C7:AC:CE:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:800::/38
Signature Algorithm: sha256WithRSAEncryption
45:4c:88:e2:24:c4:99:0e:51:4b:76:74:22:1a:29:37:d0:2c:
3f:50:01:66:62:32:f2:da:14:16:2a:c5:2c:e6:c2:59:e1:6f:
93:7a:c4:8b:8d:4f:45:3a:3d:4d:60:53:5a:b8:79:c9:2c:57:
3d:1f:ad:40:50:6d:a4:31:a9:fa:8c:36:36:78:c0:c2:8d:65:
74:4b:99:9c:b7:e2:d5:4b:d1:73:4d:3c:60:b8:e8:d3:4b:7c:
b9:34:37:fa:11:f1:25:54:1e:69:05:b3:6e:06:3f:a7:b6:06:
79:23:f0:93:59:ef:1f:85:da:14:3b:e3:00:d9:47:de:4a:d9:
9d:65:ae:ca:71:31:8a:dd:92:0e:60:21:dd:62:59:90:4f:a9:
60:a4:93:36:89:23:6a:31:4d:7d:9d:13:a8:bc:9b:15:ea:c5:
91:0a:05:01:11:d0:0a:2b:89:88:45:18:be:f9:62:21:6b:40:
46:fb:94:91:c7:5f:42:16:c2:67:6c:d6:2e:9e:22:bd:f4:75:
c7:1b:55:cf:1c:3c:09:b9:ce:35:c3:db:33:b2:69:ff:82:3e:
fc:a3:a2:12:4d:fd:c8:be:29:82:75:ff:45:cf:97:ac:81:95:
04:a8:14:85:4f:5a:f3:d5:5d:b4:87:a5:26:88:8e:16:74:94:
6c:66:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:23 2025 by rpki-client