Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c02bd597-170b-4eec-b8d1-18d678b065fa.roa
File: c02bd597-170b-4eec-b8d1-18d678b065fa.roa (raw, json)
Hash identifier: i7gReAh62doiDyA2xN/5vUNPEWSbVI13S9A2Dzn4Nys=
Subject key identifier: 97:99:37:20:BA:98:B4:A3:BB:12:96:F0:45:EB:95:4E:55:B0:F0:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 182A66585384FA90DE52600A410E2FF7140B14B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c02bd597-170b-4eec-b8d1-18d678b065fa.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2a:66:58:53:84:fa:90:de:52:60:0a:41:0e:2f:f7:14:0b:14:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=208bdbeef9767cd83c577696d358e241f2cbb362536f320ce6f8f56300614fc6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:48:d8:12:5d:5c:29:a0:f1:fb:45:87:2a:
3a:fd:13:cc:5b:b8:fd:30:41:4a:4b:57:19:cc:b0:
a4:00:ae:28:49:73:7f:41:df:7c:41:b5:8e:3e:28:
4d:15:e2:46:5f:d7:70:97:52:0f:14:90:a5:0d:8f:
f3:dc:c3:d6:a6:f5:8b:65:99:6e:ba:d9:92:5e:20:
1a:44:77:2a:63:af:e1:12:44:a8:4f:ef:fd:43:f5:
e6:a0:ed:b0:ed:f8:5c:72:f1:f4:8f:a9:b1:b7:42:
71:59:6a:5f:91:8b:38:c4:9d:d6:6a:50:8d:45:c2:
b4:1d:81:62:dd:62:a7:1a:14:1b:54:fc:e4:25:24:
50:59:a3:73:71:72:02:c3:c5:56:86:5c:f4:a5:4a:
40:62:cf:6c:fa:e4:d4:35:34:ee:82:ff:58:ca:c3:
c7:cf:34:f2:d9:3e:a6:c9:e6:53:f5:50:8a:f7:f1:
06:ef:55:bb:1e:70:cd:b8:2b:e2:9b:ea:96:12:17:
a2:29:91:bb:20:c1:10:71:c5:a3:d9:5b:5f:4c:cb:
fb:74:83:5c:83:f7:ba:fe:ec:15:ae:b6:9d:4f:dd:
1b:fb:61:39:f4:8b:d4:6d:66:0b:ac:c8:7a:49:74:
4b:37:67:51:d1:65:95:a3:6e:d2:b2:15:1f:44:d0:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:37:20:BA:98:B4:A3:BB:12:96:F0:45:EB:95:4E:55:B0:F0:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c02bd597-170b-4eec-b8d1-18d678b065fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8010::/48
Signature Algorithm: sha256WithRSAEncryption
a0:2c:ac:81:bc:9c:70:51:c8:29:5c:24:58:4a:99:c7:c6:76:
92:3e:07:d7:de:da:2b:fc:4b:0d:f2:5d:2e:d4:2c:04:2d:e7:
06:9f:f3:04:b5:80:26:2d:02:7b:02:c2:10:bb:b6:fe:8e:44:
a1:16:cb:df:0e:79:69:86:ea:06:66:40:d9:4d:a7:4f:88:39:
0a:49:91:79:a2:54:d9:f6:1a:99:28:4a:a7:5b:7a:3f:ba:e1:
f9:3f:c5:f7:90:8b:67:ba:ca:d5:bb:40:e7:0e:9d:fd:cd:e4:
df:d6:c0:ef:39:40:b3:95:f4:1f:ad:05:56:59:99:0a:4a:b2:
10:ac:f7:6e:9b:99:49:18:bb:24:7a:b5:93:ea:b1:72:dc:87:
0b:d7:0b:85:4b:8f:d9:1b:05:05:62:f4:e7:63:e3:a5:56:42:
4c:fa:1e:8f:a1:ca:df:0f:50:be:ce:1b:48:50:63:fb:21:73:
dd:48:3a:a2:06:30:b3:f6:6c:72:73:57:aa:d6:85:4b:bc:b2:
ea:fd:c2:7b:45:59:db:66:07:23:3f:e5:65:f6:74:22:84:09:
df:a6:6c:c4:9c:a1:cf:7c:37:08:dd:26:63:ce:28:22:b7:7d:
b3:ce:ec:a2:70:65:88:82:d8:6f:88:62:51:8b:84:11:95:ee:
50:2d:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:06 2025 by rpki-client