Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
File: ce994b51-2051-4114-a1f2-9e4d82f52f31.roa (raw, json)
Hash identifier: ttUcnpeVn2/3B3niQd2j8YhSey2wSMVCE05J4igovks=
Subject key identifier: C8:D5:97:00:FD:EA:4C:E9:65:07:75:6B:44:7C:71:E9:74:36:01:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 272BED1629DABCD59E3918C15DCC6CC26764CCE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2b:ed:16:29:da:bc:d5:9e:39:18:c1:5d:cc:6c:c2:67:64:cc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=01e9301ecca23cf58b36a41bd87b0618f6f6de4608bf07c51ccfcbb406390c0b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:6e:e8:a8:f6:37:75:99:f1:d4:f6:6b:2a:
cb:de:22:7c:9a:ae:9d:20:05:58:a1:d7:6f:1f:7b:
f2:ce:87:f2:5c:99:45:75:c7:e3:ae:1d:12:fd:02:
bd:a6:87:4a:9d:89:4b:ae:e4:2c:6e:d4:f4:09:82:
46:c9:03:91:09:ca:b1:a0:84:49:29:b2:8b:95:08:
c2:d9:41:5b:72:d1:21:06:b6:da:f1:df:05:66:31:
f7:93:ed:c1:a2:69:2d:f8:50:53:9c:40:63:9f:42:
10:bd:07:dd:7d:6c:5e:e6:5e:82:f7:39:a8:e4:d3:
4b:a6:47:12:a4:11:81:86:2a:87:8d:c0:07:7d:e9:
d9:c2:f7:03:7a:4b:86:3a:70:7d:0c:3b:e3:2c:df:
14:ae:97:6b:e8:46:01:c8:35:60:e1:13:ce:91:8b:
32:d0:a7:52:4d:6b:67:79:ef:99:b7:a1:63:02:c2:
88:2c:51:f9:49:eb:73:9d:e0:2c:18:03:27:e2:72:
49:6b:91:3f:21:61:49:53:fe:2c:a9:c7:d5:84:23:
24:c1:49:7c:71:93:25:f0:f8:c2:b7:ac:36:2d:84:
3d:7d:c4:a0:09:72:f0:06:74:cb:50:78:8a:3b:7f:
62:94:90:06:7f:a4:ee:49:b7:5c:11:d4:50:bd:12:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D5:97:00:FD:EA:4C:E9:65:07:75:6B:44:7C:71:E9:74:36:01:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:c000::/40
Signature Algorithm: sha256WithRSAEncryption
71:4c:c9:8c:bc:b4:28:71:d0:94:79:3f:58:e5:30:9a:7b:43:
47:66:f3:d0:9a:63:45:53:71:15:fd:af:4b:8f:71:bf:29:eb:
c3:5c:11:6e:24:8a:f6:b9:7a:14:b1:9a:7f:6e:9c:7c:91:9c:
0a:64:98:7d:5d:7c:63:0e:40:2b:70:ce:1d:48:1a:96:40:6f:
f7:9c:c5:05:00:89:09:36:65:23:08:1e:07:a0:69:e0:70:21:
34:8b:28:88:0c:da:ff:bd:58:22:40:02:24:90:b8:0b:94:11:
f9:a5:be:f1:6d:fd:05:32:14:bf:99:70:34:f6:d5:ea:f1:83:
0d:4c:f5:eb:b9:53:7e:ee:db:37:52:04:f5:38:98:5b:0a:47:
c6:59:ad:7f:d4:9d:39:62:e8:eb:d5:71:79:5b:8c:22:0f:13:
f2:0d:f1:dc:e2:08:f1:de:18:5f:7b:3d:f9:6b:07:3a:ff:11:
42:25:ad:bd:0c:80:17:b5:76:10:99:b3:7f:d2:2a:19:51:a7:
78:14:69:eb:d5:1a:5a:ab:2e:8b:bd:d9:00:73:3e:7f:c0:a6:
f9:74:87:3e:3e:e2:95:88:da:76:c7:4d:90:6c:9a:03:f8:4f:
35:40:46:0d:89:52:98:b8:2c:4a:f6:01:69:d5:fd:83:ba:ba:
12:b2:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:07 2025 by rpki-client