Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
File: c2fae133-061b-4a28-9d2b-b752d98ef502.roa (raw, json)
Hash identifier: s5pEEUa0vcBv/aXpQzfmJ4Q8hzhj8aL0EeDDtkibmuw=
Subject key identifier: 3D:14:89:CE:38:09:37:28:3F:2D:57:22:F0:26:FE:95:81:D5:31:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E05A401C82DC03B67701A38FF9286A0C0C538B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:05:a4:01:c8:2d:c0:3b:67:70:1a:38:ff:92:86:a0:c0:c5:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c20cf377757ea8c69d3b3225675e97fed891fceef29ab5c9b65920fb55c270af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:e4:26:08:a0:6c:27:b3:22:79:42:ca:17:
4b:1c:d3:9f:91:ef:c5:fe:10:e1:d8:63:e9:fa:b6:
32:4f:3d:39:07:f4:aa:9d:f4:47:22:d7:12:6b:31:
98:3e:d7:a1:64:3e:cb:85:61:25:d4:56:a2:54:53:
3a:86:b9:95:0a:91:d4:d3:a1:5b:bb:b2:94:cc:bd:
99:b8:6c:13:64:2c:e0:06:a7:ef:5b:6b:49:44:cc:
d6:a2:90:ee:a7:03:25:f8:a3:1f:27:16:b6:3f:64:
79:25:7f:48:bd:b4:3e:ab:b5:34:d0:75:88:26:91:
fc:ba:8a:f3:6c:35:c5:74:35:fa:ab:7d:24:8c:d8:
1f:34:98:7f:88:e0:cb:ba:80:cb:0d:ba:c1:24:ec:
08:c8:63:9d:6a:ce:54:b8:10:8d:36:06:33:24:98:
4a:72:2a:f2:e9:98:98:9d:98:47:0d:e5:0d:7c:89:
fb:ad:39:5a:9e:2d:3e:5a:8b:34:b0:20:52:30:fd:
0f:5b:ea:de:36:23:96:b5:77:90:7c:40:3a:79:68:
e5:a8:de:1d:7b:99:f7:59:31:d2:2f:73:13:4f:3e:
66:89:b7:9b:4d:9e:f1:8f:c6:a1:4c:32:6d:03:29:
18:5c:37:7a:01:15:c0:03:1f:0e:b4:a7:6a:b9:50:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:89:CE:38:09:37:28:3F:2D:57:22:F0:26:FE:95:81:D5:31:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:06:34:a0:3c:00:e9:00:b5:60:b2:dd:69:00:91:b9:7a:a2:
7b:1c:41:a9:5b:06:a2:da:e0:21:f5:a7:6d:4d:20:7f:a4:b4:
44:de:f7:3d:f8:93:20:7c:f0:34:0d:eb:80:7f:ed:a2:e5:bc:
ae:0a:39:93:0f:e5:2f:c1:a3:eb:2c:05:ad:c5:40:95:93:3f:
6d:fb:a2:b5:b7:5b:d8:98:2b:83:d0:a2:51:c8:b6:5a:e1:1b:
49:98:2f:f8:af:c3:b0:99:7d:b4:4a:51:a5:dd:28:6b:8d:b7:
d8:8a:51:15:55:29:1f:6e:3f:fa:fb:97:eb:cd:74:0b:1d:58:
bd:85:1d:26:1b:85:d8:46:64:58:2f:3b:01:1a:69:2a:88:2f:
03:f8:39:6a:19:3e:e0:53:b1:0f:c1:c0:ad:b8:b6:ed:46:d9:
a0:63:df:ef:0c:50:c3:67:97:e5:58:b6:27:bc:e4:86:ba:fd:
e5:72:07:8d:fc:66:cc:ee:36:13:69:b7:b1:a4:cc:06:41:5c:
13:50:f1:43:c5:e3:6b:fb:53:a7:44:3a:c2:7c:d4:66:70:57:
fd:a6:8a:75:2e:c3:b8:94:b3:52:84:52:75:04:b2:34:96:21:
6b:c9:6d:0b:58:12:9e:07:80:0c:b5:37:91:0e:fd:b7:64:1f:
59:89:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:47 2025 by rpki-client