Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad2460c-8206-4534-9b9b-355c2d524858.roa
File: bad2460c-8206-4534-9b9b-355c2d524858.roa (raw, json)
Hash identifier: HvvWSQzAfFRDZIj9MfU1VHUkvbz9xUUkH7AeexfxMY0=
Subject key identifier: F4:A2:A4:35:90:F8:29:BD:0E:F6:F7:0B:95:ED:41:6E:AE:18:E1:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CD94A050881EF46D0C511A373F66D4B3FFF4194
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad2460c-8206-4534-9b9b-355c2d524858.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d9:4a:05:08:81:ef:46:d0:c5:11:a3:73:f6:6d:4b:3f:ff:41:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=31324b97b4663f7d654374e9db272a3a66df557636135d0ed671b0733822d368, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:78:24:09:47:3b:8f:6f:21:23:5b:54:56:
bf:14:59:1d:f1:0d:e3:63:f8:bd:ee:05:f3:99:7f:
c3:4b:f8:3a:b7:e0:a1:84:b7:04:75:14:1c:7c:b4:
33:c3:69:fe:58:00:4c:70:9c:57:8e:84:aa:4b:d2:
72:71:65:fe:ae:7f:2b:81:20:92:25:d7:f7:1f:f4:
38:ff:ec:25:0c:ee:be:71:90:01:cc:6d:42:b2:e1:
6b:f9:9a:14:b7:a8:fc:8a:53:b2:c2:09:83:57:fd:
d7:b5:bf:c5:90:51:09:01:70:db:d2:92:51:5a:b9:
90:76:c9:0b:05:89:73:ba:d0:18:c2:be:f6:f3:ad:
14:10:9e:df:2e:0e:80:3b:c1:7a:7b:81:ac:58:4c:
24:66:b9:dd:6b:32:34:be:d9:9f:91:6a:44:55:09:
3c:cd:ac:3b:94:fd:dc:20:4a:28:1e:a4:68:a8:43:
3c:b2:f7:cd:97:8d:6d:b2:33:f9:b2:06:f6:3f:92:
a5:58:e6:11:a6:38:9b:23:0f:bf:58:07:94:d2:29:
f0:00:98:1f:69:a8:03:1b:c7:88:4f:db:d8:f0:6f:
82:79:47:83:8c:00:98:a4:9b:f6:2e:47:63:1a:be:
dd:6d:d2:ee:e3:3b:0f:e8:08:1b:f4:32:de:43:a2:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:A4:35:90:F8:29:BD:0E:F6:F7:0B:95:ED:41:6E:AE:18:E1:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad2460c-8206-4534-9b9b-355c2d524858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:6000::/40
Signature Algorithm: sha256WithRSAEncryption
aa:cc:50:d4:0a:d8:49:bd:c8:58:40:bf:94:93:9b:7d:08:7e:
39:20:53:25:0d:ea:54:4d:93:51:d4:87:cc:2e:2e:20:76:c6:
d8:33:4a:28:3c:e6:85:87:df:cd:30:68:f4:27:90:9d:05:6e:
f2:e7:1b:81:96:47:79:17:11:77:00:e9:c3:55:ac:d6:75:b9:
73:4c:39:f7:7a:d3:10:95:e8:b4:6b:70:4a:4c:64:34:d8:81:
e1:60:75:dc:58:1e:68:3c:0d:82:f2:dd:d6:7b:dc:61:4c:86:
b8:c6:22:b4:72:2c:92:c4:b5:78:40:32:8a:66:f8:46:49:43:
be:1c:2c:bc:e6:54:de:74:b8:27:74:d5:2b:81:d4:ff:19:9e:
4b:e4:ee:6b:53:7e:21:c2:63:9a:86:e1:0b:f7:6e:13:cc:b7:
c5:17:6d:1b:45:d7:7b:91:12:9d:32:11:53:e0:fa:2b:a1:f5:
91:2e:7d:9b:81:88:b8:10:cb:50:9d:66:88:0e:96:df:26:82:
6d:d2:c7:2f:db:18:64:b9:5a:26:b7:3c:be:94:36:09:b9:c0:
c3:ed:32:d6:28:3b:d5:eb:49:82:94:0d:35:b0:51:02:2e:44:
87:69:0c:18:ee:86:18:fb:f5:bf:d7:b2:00:2d:5c:99:87:d3:
d0:5f:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:11 2025 by rpki-client