Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa
File: cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa (raw, json)
Hash identifier: 4iCIgTdWNxTDo3ZWF/yGjHmsw9uQsQJnitMbaE2eIZo=
Subject key identifier: 06:8C:1A:98:3A:3D:28:D6:53:E4:F7:92:35:44:C1:32:25:7F:37:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 298575F9E7FD837A375A3DC07B09CBB0CC6F4927
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:85:75:f9:e7:fd:83:7a:37:5a:3d:c0:7b:09:cb:b0:cc:6f:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=e3873b88f08073226efe6e280fbfa9a6d68fc58bc97172d1ddeefb11f7a330a4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:04:6e:2a:7e:7f:67:45:8b:5b:12:b1:17:
88:ad:d2:d1:14:84:2b:dc:78:63:da:e7:5b:af:a8:
91:13:79:6e:fe:52:b3:8c:1a:10:40:07:43:8a:5e:
8f:19:b8:3d:34:3f:fb:8b:69:84:c7:50:cc:c7:f6:
b8:fc:66:0c:db:ea:7c:77:1e:40:43:56:0d:69:a0:
e4:ac:40:1e:83:16:32:38:69:d2:81:bb:cd:60:9e:
4f:76:05:b1:44:3b:59:3e:04:a8:9f:29:cf:c8:14:
36:74:aa:3f:cc:fa:63:25:3e:fe:ad:90:9c:60:73:
ae:8a:68:5d:fb:e2:5a:3e:35:a2:dc:7c:8f:05:ef:
59:ea:7e:3c:12:b8:3d:6e:d4:56:b4:7b:c6:e1:a3:
9f:d7:07:7c:cc:ea:51:07:4d:12:f9:ca:e0:37:ae:
a3:df:a3:d1:0a:ca:75:d7:bd:b5:53:da:3e:f0:93:
fd:3f:85:89:84:5a:4b:5c:6c:df:8b:6f:76:d9:30:
38:ca:c6:da:ae:60:94:c9:4d:ff:13:6b:b9:c2:98:
2c:9c:82:03:85:8b:a7:8b:46:34:b4:4c:bd:b8:a6:
8f:91:e3:9a:3b:46:ce:83:5f:18:28:72:45:e7:60:
66:3a:79:1d:ac:b7:df:2c:02:f1:a4:4b:2a:e3:b7:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:1A:98:3A:3D:28:D6:53:E4:F7:92:35:44:C1:32:25:7F:37:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:cf:c0:11:c8:cc:44:8c:12:ea:fe:0a:8c:b4:ff:77:fa:73:
7d:3d:50:ac:4e:4d:c0:d7:ca:e1:7c:9b:54:86:c8:49:76:6e:
ac:c5:a7:d3:b9:f1:b9:64:6f:a1:9b:de:3e:72:a1:64:81:e0:
45:d0:ea:ec:14:02:78:05:c4:09:8b:c4:ad:34:a2:ac:77:be:
61:cc:9f:cd:ba:a5:04:9a:89:b8:fd:7c:99:3d:9b:52:c8:b4:
27:7f:35:1e:fe:47:16:50:c4:c6:55:86:81:30:0f:f1:b0:11:
4f:1d:ae:13:4f:3e:61:1e:27:5e:b5:ae:b6:54:d2:32:a0:d1:
64:69:a5:f8:47:83:61:35:36:f5:cc:6b:ce:4b:76:93:3f:3f:
c9:58:52:08:9d:59:75:3a:e5:96:64:e2:c5:08:b6:eb:e2:49:
db:1e:e6:3f:3d:66:d7:ae:8d:50:1e:fc:ec:37:25:ca:2a:5b:
29:14:c0:32:85:13:f1:21:0d:b1:35:c2:dc:d5:4a:9e:70:5a:
01:b8:c1:20:8f:36:88:9d:5b:9d:f6:3e:3f:ee:f0:1d:82:7b:
11:52:59:c9:3d:5b:a4:a6:82:0b:1b:7b:a7:05:be:19:6a:1f:
9b:6c:9b:59:95:46:0b:6f:58:21:6b:cc:84:01:77:42:7c:27:
6c:f6:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:10:31 2025 by rpki-client