Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
File: ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa (raw, json)
Hash identifier: 7EjwwcuaRNBWjMM0myZMVEhJ5rvXJhaSAMqZLT5zlQY=
Subject key identifier: 94:9F:AD:8F:10:89:C3:21:82:53:87:9C:C9:A0:D0:5E:A8:92:7A:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3243498D400F5078443B251E119CA94042D2EEDC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:43:49:8d:40:0f:50:78:44:3b:25:1e:11:9c:a9:40:42:d2:ee:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=04f49d5d6a1f657c8cd9f2b9e4973b0c6b4e2e4e07828eedafd9babba5b93341, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:d9:d5:8f:cd:b4:64:99:f5:1e:43:75:bd:
fe:00:64:57:cf:bf:3c:b8:56:3a:5e:37:0f:0d:85:
46:3b:75:a4:49:f3:14:f2:6f:eb:0a:d0:f5:55:50:
f8:83:0c:64:2c:7d:4b:1d:1c:ae:a3:aa:24:02:34:
25:90:45:28:1d:66:05:a1:2f:af:4a:9a:8a:2f:3c:
28:63:37:b7:84:41:d4:5c:9b:a6:3b:22:7a:55:4c:
a8:d8:0f:65:87:81:e4:8b:52:ad:43:2e:9c:3c:11:
f4:b1:95:90:3e:74:d2:c9:0c:92:2a:fb:68:98:64:
22:0b:91:09:29:82:5a:b0:fe:9c:f9:0b:2f:5d:e2:
59:08:97:f5:04:3a:68:72:7d:b7:ae:95:1e:e4:b4:
7c:9c:f0:f1:e0:88:22:34:1d:f6:43:ef:42:aa:06:
8c:86:93:f2:c6:5f:96:28:dd:c4:13:3d:3f:e1:1f:
9d:75:32:e5:ce:0f:7c:73:7a:f8:1b:92:90:b6:f1:
ea:7e:fb:51:e0:99:8e:63:64:85:24:eb:18:d9:8b:
44:8f:b3:59:71:19:e5:1a:e3:51:95:aa:fa:a1:cd:
cb:79:6c:5c:61:e8:2a:c4:f2:16:73:59:71:66:79:
e9:7f:f8:d1:5c:84:4b:d9:46:19:d0:a4:6e:90:42:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:AD:8F:10:89:C3:21:82:53:87:9C:C9:A0:D0:5E:A8:92:7A:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1000::/40
Signature Algorithm: sha256WithRSAEncryption
52:a0:79:e9:3f:e9:f9:a2:99:e6:70:f3:75:45:c2:5c:b9:13:
48:70:e2:f6:95:a2:da:bd:67:02:21:ee:14:f0:ce:dc:b6:f4:
fa:df:dd:0b:4e:64:9a:4e:0c:a7:b9:37:3b:95:c3:23:1d:95:
58:77:81:21:4c:af:98:82:81:24:92:b2:6b:b4:b7:83:4c:22:
3b:d3:7b:97:76:b7:b9:0a:41:cd:7b:26:33:46:80:70:20:0a:
e2:7e:1c:d8:9f:09:a9:08:07:11:d0:a3:8f:9b:ff:35:08:a3:
b4:9d:1e:73:63:b0:70:15:ef:5d:dd:af:65:fd:60:76:bb:0b:
81:cc:dc:31:11:31:bc:3f:df:1a:7a:ca:9a:41:e9:fa:e2:59:
1b:7d:e9:56:01:a6:63:23:68:ae:da:d3:c6:7c:fb:01:a0:f1:
e9:b7:99:46:7e:25:eb:5b:93:d3:42:9e:4b:85:09:9c:c3:69:
cc:71:5c:b3:75:2b:3d:e4:d9:11:63:d3:d3:84:d3:ae:fc:6c:
f1:d4:7a:80:99:ab:af:87:b4:4d:8c:4a:0a:b8:b5:16:99:51:
6e:1e:92:94:12:aa:73:0a:a2:7d:99:32:0f:f8:9d:f4:7b:8e:
2c:c6:d6:02:e0:92:38:82:41:43:e0:1c:7e:0a:c9:62:dd:94:
72:7e:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:28:13 2025 by rpki-client