Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
File: c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa (raw, json)
Hash identifier: 1u3/GpWjQ1xhmA65bGyl3h3V/+tCh27Ptm8o4pSujoI=
Subject key identifier: 49:3F:67:CE:1B:9F:7D:CF:07:64:0E:69:3C:44:C4:5D:D9:1A:68:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28FB5C783EB44BF8D046B80AB4025BFDE8F2F810
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fb:5c:78:3e:b4:4b:f8:d0:46:b8:0a:b4:02:5b:fd:e8:f2:f8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d8d44011dfb3f7e1ba3873307a70c8ef5c0f79ea593f60cf0a49e042ae5566a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:af:b8:b5:00:ce:5d:ba:78:24:fd:4a:8e:
3e:6c:77:05:01:48:c7:b4:a5:ab:6b:f9:c0:75:64:
18:45:26:f2:32:f6:70:a7:a7:88:14:d5:f1:a3:21:
ec:b0:19:f9:5a:8b:03:a8:b4:25:c9:59:82:18:e2:
39:1d:07:23:d5:50:e6:0d:71:f7:f0:23:9b:02:17:
ad:07:cd:8a:39:82:c7:0d:f7:6c:e1:17:8f:63:bf:
a2:a6:75:13:c1:98:4e:e2:a1:e3:94:61:2b:f0:89:
df:80:1e:32:cf:2b:a4:ba:9f:3c:d1:47:dc:70:87:
e9:26:e4:a2:c8:69:5e:76:88:55:c8:68:2f:8a:45:
aa:cf:be:89:07:db:d8:49:be:e1:db:79:b9:ac:1d:
a5:3c:3e:a4:69:d5:8e:ee:87:9a:5f:26:1b:46:2b:
34:ca:8c:ec:a1:3c:63:1c:a4:7c:cd:70:cb:7d:98:
b4:8d:9c:0d:4b:b4:d6:bc:dd:dd:10:75:ce:d8:7e:
9f:e4:50:8f:eb:67:3f:b5:f4:87:4c:be:3d:ce:13:
58:3b:37:56:a3:b1:ba:ed:8c:4e:aa:6e:52:3c:99:
61:9d:c8:1f:b6:ba:33:84:9a:4a:36:30:d4:68:ec:
05:32:5e:02:08:b1:40:27:b5:f2:31:69:58:34:d5:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:67:CE:1B:9F:7D:CF:07:64:0E:69:3C:44:C4:5D:D9:1A:68:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
05:70:e2:c4:98:91:39:c4:05:8c:72:eb:92:61:bc:2c:d2:03:
48:4b:21:95:6d:39:f5:2c:3e:be:a9:93:e6:1d:c2:7d:b5:46:
cd:b2:db:f4:1b:28:69:19:2f:69:0c:42:bd:d4:e8:d6:6e:a8:
a4:0e:9b:18:a1:64:38:fd:3e:74:b0:b7:6d:30:29:26:03:50:
b8:8c:01:47:5c:78:67:4b:bb:3f:af:b1:e0:45:a7:cf:b0:ef:
78:09:2b:aa:8f:06:99:53:02:0e:fb:c8:2a:fe:4b:b6:18:8c:
4b:98:aa:f5:6d:8a:6d:2c:5d:4e:f5:a4:c1:16:a4:dc:e4:43:
26:19:ec:5f:dc:9b:06:51:a5:98:e9:21:2b:16:d3:57:1e:61:
2e:17:b1:39:e8:e1:d3:f3:7f:06:2d:4b:a6:f5:f1:08:d3:bd:
65:28:96:c8:b8:08:02:14:2a:66:78:e1:40:c7:38:e8:dd:ce:
f8:de:a0:51:70:25:66:0a:4a:59:54:e7:6b:f2:1c:72:2d:ba:
55:d1:4c:51:60:4f:6e:67:cf:19:e6:e7:49:b7:af:78:9d:5f:
21:f9:cd:86:1b:1a:ff:5a:64:07:70:4a:1a:69:42:d3:4e:48:
0c:4f:c6:04:34:20:76:53:1b:8a:e5:0f:8e:5c:44:30:d5:7b:
9c:44:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:44 2025 by rpki-client