Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c943d5-fc37-4c49-9dba-128c8e280c32.roa
File: c3c943d5-fc37-4c49-9dba-128c8e280c32.roa (raw, json)
Hash identifier: H1xOBbalfg5CPSrjMitBhmhE/4ffzHqrSzI7TuAT1uo=
Subject key identifier: 86:D2:6F:36:F5:4E:64:71:E6:A0:A8:F1:A5:A9:9D:F1:C4:A0:D0:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02356C1715CB6443C89E01B314C0C89FD4D5734D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c943d5-fc37-4c49-9dba-128c8e280c32.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:35:6c:17:15:cb:64:43:c8:9e:01:b3:14:c0:c8:9f:d4:d5:73:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f66debabb7da358bcc7a9e1008ca1e6c6d838fc0df291eb6aa38a6b45a2ed4a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:d3:fa:51:12:2a:be:49:2b:7d:92:8e:3d:
68:84:d6:65:82:06:7e:d6:d7:78:21:23:b0:d6:52:
d3:bf:cd:27:7a:4e:28:8a:a5:42:63:5b:08:0f:a3:
c0:d7:54:ac:ee:20:3b:c7:c1:f0:b5:36:c6:b2:78:
ea:87:aa:48:bb:19:47:d8:fb:89:9d:0b:87:bc:d6:
59:4a:e6:c1:3a:17:8e:e6:c4:4b:db:9c:58:bd:ca:
5b:bc:39:e3:a4:76:0f:20:49:36:3a:dd:be:67:23:
8e:fc:b8:84:1c:2d:0a:69:50:18:4c:f0:bf:3d:0f:
38:ed:8c:e8:e9:57:36:92:1e:1c:7d:2e:9d:c7:02:
72:88:b5:00:8c:f1:e4:4c:8c:b1:4d:4a:11:49:63:
7a:90:66:c8:18:45:ed:2f:c4:ab:b9:5b:49:c5:bb:
d1:88:21:92:7c:91:b0:eb:c4:2b:ef:d2:3a:ef:f1:
be:3b:d2:dd:4f:5b:69:aa:2a:50:d3:81:3e:9d:b6:
07:72:56:39:2e:cb:67:c4:85:74:5a:37:1a:12:91:
5b:2c:58:b8:13:9f:9f:db:fc:3b:f6:35:e4:fe:5b:
60:05:a4:f4:8d:d3:a9:7d:5d:7c:44:9f:a3:34:40:
14:37:17:e1:1b:25:c0:5d:58:e3:52:ba:fe:44:80:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:6F:36:F5:4E:64:71:E6:A0:A8:F1:A5:A9:9D:F1:C4:A0:D0:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c943d5-fc37-4c49-9dba-128c8e280c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5040::/46
Signature Algorithm: sha256WithRSAEncryption
3a:6f:63:fc:28:9e:d6:35:e3:b1:d2:a1:78:23:1e:b3:bd:48:
b2:a5:cd:ea:56:61:f9:3b:84:65:5a:04:7f:bc:24:ea:aa:6d:
b7:12:ec:d9:c4:97:a5:af:5b:9e:0b:5a:52:77:a5:1e:f1:03:
8a:be:e7:33:d8:03:9f:cb:87:a4:4d:1b:f6:24:e6:ea:7f:f8:
db:1e:b0:1a:29:8e:5d:ad:31:b9:f0:b2:f9:aa:26:f7:c8:c8:
be:1b:02:96:26:ad:ff:62:e9:23:00:fc:df:ea:72:da:dc:78:
ab:7a:96:18:e4:65:d8:90:c6:67:af:bc:fa:c4:cf:b4:af:69:
8f:21:8d:83:e9:8e:ba:fd:ab:3b:c5:8b:c6:47:89:a8:86:73:
bd:5c:05:c4:22:79:be:63:72:c1:af:ed:2f:6d:1d:9c:e4:c7:
46:df:cc:e4:f6:67:8a:18:b3:20:f4:ab:3b:50:e9:12:3a:9d:
55:61:63:20:df:70:93:62:62:8a:97:89:c0:ec:57:1f:28:96:
e9:17:b7:72:6f:0f:8a:11:ae:21:ca:de:28:94:28:0f:43:53:
0a:ba:a8:fc:d5:46:1d:cf:86:80:d6:63:41:3d:63:1c:99:84:
f1:10:cf:32:b2:12:d1:08:c9:03:41:aa:40:f4:4a:c4:e0:39:
cb:96:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:33:21 2025 by rpki-client