Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7743543-1a04-47c2-8128-1b90de9136a9.roa
File: c7743543-1a04-47c2-8128-1b90de9136a9.roa (raw, json)
Hash identifier: I6ZTMALYcrQMMy7LtGqoa3x6r7Mmjt2KvdLTzfy644o=
Subject key identifier: 96:6D:13:4A:B5:16:34:41:81:05:8B:B9:B0:38:2C:D2:BA:2D:A9:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F9A0D86F5F8C3D607D396F72D59893DAAE8BC9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7743543-1a04-47c2-8128-1b90de9136a9.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8090::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9a:0d:86:f5:f8:c3:d6:07:d3:96:f7:2d:59:89:3d:aa:e8:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d3e1b4c0599b01eba8fb8018309ffccaa58f86296491af43e20b58ef4cddac66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:d3:61:4a:ef:23:11:66:f5:53:2c:eb:77:
c8:4e:97:13:4f:2f:b8:7f:54:b5:e7:e1:af:41:b5:
c9:50:2a:11:9e:03:43:87:4b:f6:0c:a6:fd:38:bc:
ef:d0:b2:ce:94:9e:ce:67:77:99:6d:e5:3b:86:e0:
c3:0b:54:58:f3:e4:cc:0a:9d:08:8b:7f:2b:17:92:
c7:fd:d9:7a:99:60:62:c5:a1:b1:da:e9:1b:e4:ca:
8f:0c:92:ce:ad:92:0b:39:a8:5c:17:ac:22:14:96:
73:5e:43:04:a7:89:90:9e:c5:5c:5d:4e:ed:42:69:
67:93:1b:63:9d:8a:d4:7e:1a:1a:8b:f1:db:df:a9:
5a:f6:28:76:ee:a9:f9:33:0e:16:4c:41:52:ef:21:
b0:ae:3f:e9:65:71:d3:f1:7b:b2:9c:b4:e2:5a:4c:
26:a6:7c:83:7e:8f:90:a3:a9:fc:83:21:2b:e0:f1:
77:97:8b:f7:b2:d4:82:27:04:b6:d3:dd:53:34:7d:
03:33:be:69:dc:dc:6f:47:d4:c5:e2:45:03:c2:ba:
14:f9:31:0e:1d:50:8c:c6:92:33:95:f6:eb:8e:2d:
0c:33:2b:36:71:5f:0c:33:34:2e:74:57:24:fa:00:
12:26:9d:37:87:ca:96:41:6e:85:ee:93:b9:1f:4b:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:13:4A:B5:16:34:41:81:05:8B:B9:B0:38:2C:D2:BA:2D:A9:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7743543-1a04-47c2-8128-1b90de9136a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8090::/48
Signature Algorithm: sha256WithRSAEncryption
56:46:44:7e:90:29:ca:31:4f:65:63:da:d4:24:c6:74:62:bb:
01:20:c9:fd:58:e3:8d:14:b9:30:4a:a7:74:c2:66:90:31:01:
e4:42:2e:a9:39:de:13:7c:15:a2:c3:2f:82:61:e1:e2:ee:d1:
ae:ef:b1:ac:6a:9b:54:6f:04:16:13:f5:10:03:6d:a6:2b:c8:
29:29:87:16:57:9c:08:d8:47:f5:b3:0e:c6:96:45:1f:7f:7c:
dd:1b:7f:d7:9c:f9:91:11:5d:2f:5a:f5:6b:13:c3:d1:13:bc:
80:3b:0f:4e:95:56:29:5e:ab:5c:86:e6:bb:43:75:b9:5f:47:
27:45:fe:ce:f7:eb:e5:ca:0a:d1:74:30:97:3a:37:a0:03:61:
35:17:cc:d0:84:c6:18:24:e6:72:d1:ec:52:3e:d2:f4:f1:ae:
68:7c:e3:e0:10:65:6e:ab:7b:79:f7:4b:d8:e6:0f:91:ff:97:
0e:a5:76:41:e0:24:af:42:c4:94:9b:76:0b:63:66:17:7d:60:
74:84:44:27:76:93:10:16:89:a6:b8:c1:a3:0f:0d:be:42:f8:
e2:42:83:b2:22:4e:66:33:6f:0c:e8:48:5b:a9:63:5b:c0:a0:
a3:0e:4e:3f:3e:32:eb:9f:17:6f:b2:ab:29:ca:eb:87:27:ff:
f4:dc:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:25 2025 by rpki-client