Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
File: c0520c80-698f-4538-b32e-e9663caeb979.roa (raw, json)
Hash identifier: FBUY6Om5dVdqZ9gz0lb78JRsXK5EZfPnfr86kw8dy+E=
Subject key identifier: C0:A4:27:33:F0:36:E0:8A:0C:58:A8:61:57:71:97:07:81:5D:C5:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 410BD5727D356BA2EF94998D98AA0B28207E5B55
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0b:d5:72:7d:35:6b:a2:ef:94:99:8d:98:aa:0b:28:20:7e:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c2ee4ba8ae9922c8c29c553a6a00758f476db9bc1aa7277d97b594e2f476a380, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9d:f7:4d:fb:cb:ca:80:0c:a6:b5:94:a2:18:
0f:28:7b:99:7e:7b:46:54:83:08:cb:a6:2a:da:64:
f9:e9:c6:c3:9b:99:04:12:5a:8a:45:25:cb:0e:e6:
31:87:6a:b1:7c:ba:c5:34:7a:be:2f:36:0d:8f:bb:
35:85:e5:72:f7:0b:5e:cd:21:9e:0f:33:61:ae:68:
cb:d2:34:45:4a:9e:90:e9:85:c3:0b:c5:6f:e1:21:
1a:2c:e1:c4:93:3e:ea:3b:13:81:7e:2a:89:0d:bf:
84:f1:67:fa:5d:dd:e2:b0:2d:7b:90:b2:9b:6b:a2:
9a:a3:1d:76:b6:50:46:35:c5:5e:bb:66:5d:11:4a:
40:80:56:12:dd:c8:85:b3:1e:59:33:18:b4:92:95:
57:d4:cb:f5:32:18:26:0d:80:90:2c:25:a8:ed:22:
f3:ef:3e:fb:89:40:e3:95:18:54:df:3f:8a:9f:1f:
7f:7e:1d:af:c2:14:b8:e9:1c:05:ed:41:d6:6c:ed:
0a:69:a9:18:a5:1f:a7:0f:8f:e5:0c:c5:a7:02:57:
c1:d0:ab:31:34:5b:29:70:fc:b4:f7:e2:26:00:a3:
4e:4e:56:5b:83:cc:90:d6:78:cf:c3:06:c2:56:79:
af:70:85:96:cd:a6:0a:5c:15:e3:53:c4:6b:fe:42:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:27:33:F0:36:E0:8A:0C:58:A8:61:57:71:97:07:81:5D:C5:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8050::/48
Signature Algorithm: sha256WithRSAEncryption
80:67:01:34:4d:bb:3a:4d:70:88:60:eb:df:b9:03:e4:06:bd:
eb:90:19:88:1f:7d:10:a0:ac:d2:3a:43:f9:84:c0:89:46:35:
7d:34:f5:e1:90:99:a2:7f:f9:03:ac:0c:d5:c7:dc:8e:3c:b9:
b3:1e:29:b3:67:b2:2c:0e:ab:fa:f1:de:30:f9:4f:1b:d2:aa:
2a:8d:22:b6:79:e2:4d:dc:8e:09:be:9a:50:0b:07:60:e3:d9:
42:08:24:19:91:63:1c:12:01:5c:e1:aa:15:90:56:a7:ba:26:
2c:4d:c6:5f:69:05:f8:d8:49:02:aa:d9:bb:1c:6a:b6:f2:80:
89:c4:87:7a:50:dd:2e:22:2e:7b:40:37:c9:79:c3:a5:25:20:
a2:eb:0d:0f:f2:aa:a7:d1:81:9c:8d:b4:33:ad:cf:d0:37:ae:
ff:52:fe:d8:83:8a:2e:90:9b:bb:2b:ba:7c:72:a3:90:73:01:
7a:ae:7b:61:55:db:a0:46:56:6e:94:0d:9c:bb:a6:ed:5d:02:
2d:fc:89:86:00:bd:f9:50:ed:4b:7e:aa:6b:89:3f:57:de:fe:
2d:8e:42:fe:e9:11:d9:41:17:04:b1:0c:8e:53:bd:87:d7:d2:
d2:11:8e:1d:e6:43:b8:f9:4d:15:c3:1d:a1:4e:ac:db:e5:c2:
10:1b:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:53 2025 by rpki-client