Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
File: c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa (raw, json)
Hash identifier: g9Ivd4yPhi3kwUc00BvrcVEDV8uGc63szvBLwFl7BXo=
Subject key identifier: 7A:8E:BE:93:74:71:75:2B:44:43:FB:81:16:90:23:DB:6B:50:66:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C4070527F191188B5CA2FA70BD075B273EC3C59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:40:70:52:7f:19:11:88:b5:ca:2f:a7:0b:d0:75:b2:73:ec:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=634bb403decc5a1d8cfc60563ffa05023db5ea5521a404c873bf87564bd9cdf6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:55:c4:0b:c2:41:51:9c:10:02:ea:0e:f7:
3b:33:f6:08:f4:60:b2:b4:9c:40:c1:48:a5:3f:75:
62:05:52:9d:2f:59:23:91:4e:e9:ee:5d:33:59:d8:
ac:b4:93:76:2a:eb:a1:63:9a:f0:89:69:dc:06:2d:
6e:df:46:7a:f1:8f:9d:f3:b6:9d:16:a6:7d:45:05:
2e:15:d6:5f:54:fa:60:c6:fc:0d:76:b6:75:7e:19:
90:36:95:a7:1e:35:00:69:5d:7f:20:3f:5a:bb:a7:
d1:12:3c:a5:80:09:14:73:3b:8b:7c:3b:15:f8:ba:
df:69:91:02:82:5e:08:63:cc:a5:0e:82:28:6a:00:
7c:92:fa:7c:4c:3e:4a:c0:e1:12:4a:cf:4a:9e:18:
b4:f6:a9:87:dd:38:40:21:bf:ea:83:70:0b:6d:36:
c9:de:c6:98:9d:f3:c5:aa:f9:f6:28:3b:26:eb:57:
b3:5e:e3:94:05:9f:9d:c2:c0:7f:78:15:ef:cb:86:
ed:d8:87:a7:f3:ca:66:ac:5f:a6:9d:1e:67:65:04:
61:ee:75:60:17:bb:62:26:da:90:1e:da:f7:14:32:
69:b7:94:bb:df:0f:28:86:32:a9:0c:11:34:ed:63:
8a:8c:e4:08:5e:90:84:7a:3f:ae:8f:b6:e9:9c:13:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:BE:93:74:71:75:2B:44:43:FB:81:16:90:23:DB:6B:50:66:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2000::/40
Signature Algorithm: sha256WithRSAEncryption
8a:b4:f7:4a:d0:0c:d1:10:47:d8:32:cf:0a:51:f3:59:74:05:
30:e9:83:b0:69:ab:c7:66:17:8e:b6:5d:5b:98:f0:cd:98:88:
56:04:fe:b1:a5:8e:9f:4f:3a:37:2a:be:67:86:55:8c:f5:9a:
0d:70:09:79:0d:3d:15:99:ab:4f:1a:39:89:f8:d7:06:fe:64:
b9:5b:c5:c6:f9:ee:b4:02:97:e6:f1:2f:42:ee:2e:80:2c:23:
1a:5f:bb:0a:08:24:7e:b0:1f:7e:b4:b2:d0:37:16:63:96:e2:
9b:7c:15:99:97:51:03:8f:94:e9:0f:46:40:fb:f7:4d:01:e5:
8b:e1:e6:82:b6:62:81:f2:d9:d3:10:3e:8e:35:e9:d3:bd:fd:
a4:a5:ef:7a:1a:d7:4d:29:61:ea:eb:7e:e8:1e:30:55:c2:13:
e2:37:a2:a5:d1:b8:33:2d:ee:21:24:c1:22:9c:22:74:33:e5:
c1:41:bd:49:82:3d:59:e1:9f:19:7c:1e:9d:97:e3:2a:9b:8f:
28:d6:35:1b:02:f5:db:85:43:90:c7:f8:0e:47:d4:d3:13:60:
1f:04:69:35:08:5c:43:63:f4:0c:bf:68:06:fa:91:15:43:45:
13:16:5a:34:43:73:fa:52:92:81:57:c5:77:67:99:0d:0a:a6:
97:1a:9d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:28:17 2025 by rpki-client