Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa
File: cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa (raw, json)
Hash identifier: ve3Rxc5eKHaPxN1EgMP19Jr3O8uQ1arT7Ykk9nuuu4k=
Subject key identifier: EA:BD:E4:09:84:86:1D:AA:8A:9E:98:8B:72:3D:3A:B7:65:2D:9B:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A0F409966DE9AD3B348FFEFBBC3BF1A0DE4B554
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0f:40:99:66:de:9a:d3:b3:48:ff:ef:bb:c3:bf:1a:0d:e4:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=82deac302558ccc703a71bead11f7eff20da0f3118c3350bbc219906a6a3b500, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:fd:e8:ae:89:b6:43:33:3f:e0:f4:ae:b0:
67:8e:38:f0:c3:be:f5:99:13:48:a0:fe:1c:87:03:
6b:ee:f2:21:db:ad:9e:82:27:93:5b:2b:0f:66:fa:
6e:73:0f:69:29:2f:91:3e:2a:28:cf:d6:0b:c0:e9:
8c:82:ad:ac:16:4c:c1:ee:57:75:6d:08:92:23:aa:
9f:87:4e:f7:dc:24:09:10:21:f2:b9:76:29:27:9b:
17:b4:1d:05:1b:71:2a:b9:0a:04:8a:76:56:67:2a:
de:9d:06:d6:81:dc:a5:26:40:0a:b9:c8:e5:b6:65:
26:56:17:92:71:1b:a7:c8:e6:24:2d:7c:10:9f:b2:
15:0e:57:22:17:43:13:ce:ba:68:95:f6:bf:70:fb:
11:2c:9e:3b:7c:0d:6d:15:ed:6b:c9:3f:15:1b:6a:
06:3f:58:10:04:3f:d4:5f:2f:82:26:29:7c:67:73:
da:35:d3:57:03:c3:43:59:fc:5b:32:93:8c:03:de:
66:be:bc:9e:86:5b:0d:76:df:fb:73:7e:f5:2f:46:
b7:99:54:75:78:07:27:de:41:3b:15:e5:3e:b9:cb:
ea:0f:12:68:84:9f:7e:84:77:36:dd:83:16:8c:9a:
e6:87:b5:94:01:42:41:54:77:3f:ae:d2:92:c4:da:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:E4:09:84:86:1D:AA:8A:9E:98:8B:72:3D:3A:B7:65:2D:9B:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1040::/48
Signature Algorithm: sha256WithRSAEncryption
73:25:d8:d2:08:5f:da:15:13:ee:59:15:05:67:27:4a:13:ff:
de:d6:6d:48:a3:e7:29:89:97:dd:b1:31:6d:10:c7:8d:54:a0:
43:e9:aa:3c:65:10:51:cc:de:f6:fc:ff:8a:b8:b0:eb:e0:f2:
eb:f3:a5:ff:ed:29:5d:d3:8c:24:11:49:ce:d1:0b:d1:93:3b:
da:03:e2:2c:19:8b:59:91:52:fe:be:b9:41:bb:0c:56:f0:2b:
ab:07:04:fa:1b:ed:7a:a4:13:6c:96:33:3c:6b:2a:f2:0e:53:
74:93:25:1c:d4:af:73:a9:55:e4:94:1c:ef:09:e5:b3:ea:53:
3b:8c:9b:fa:82:c8:eb:89:fb:7d:fe:90:5d:c2:25:19:ce:7a:
ff:bc:f0:c4:5e:dc:a3:89:9c:3c:de:16:6d:91:3d:4f:c6:64:
89:93:46:39:eb:d7:e9:ac:a3:d2:51:4c:80:b6:71:23:5d:6a:
7e:a1:f0:e0:e3:64:f7:27:c4:d0:b6:f8:56:f4:91:cb:db:61:
5b:c4:77:cc:a6:9b:72:be:f8:dd:32:57:c1:37:0e:be:99:e7:
13:aa:9f:19:7c:b3:90:bf:d3:af:ea:a5:00:fc:13:a4:03:69:
7f:be:42:e4:7e:c8:db:9e:54:08:ac:46:61:0a:ea:7a:f6:19:
d1:47:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:38:42 2025 by rpki-client