Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
File: cfca2455-b58e-43e0-a15f-276f8a5b527f.roa (raw, json)
Hash identifier: S3o0onlVL7nhVNbl0U9D7AorpHvE0Gx6YTfmpdSUkJ0=
Subject key identifier: 8D:27:7F:FC:54:AF:1A:70:48:0B:CF:ED:E1:3F:9F:56:93:4C:A2:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 062E3E2F19489938660F5C1B5EC6BA634E727478
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2e:3e:2f:19:48:99:38:66:0f:5c:1b:5e:c6:ba:63:4e:72:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d829445dad1d0597eb4cdf951bd959b68da39a0213c6ddbf2303e406052ed22d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:5a:92:89:04:4a:9f:21:10:dc:cb:8e:03:
11:dd:0b:e1:4f:14:a0:a8:0b:2f:fe:a1:e1:65:2b:
ea:9c:86:43:db:69:5f:cc:30:13:2d:fe:97:a2:66:
16:19:d3:97:92:fa:8a:1c:b2:a2:f8:f8:b3:7b:56:
4d:2a:5a:ef:91:91:26:45:fa:2f:e0:f4:82:47:04:
38:3b:eb:07:47:43:17:8b:9c:13:f4:f0:00:e7:93:
9a:f0:cf:e7:98:74:8b:2c:70:48:1b:f3:dc:4f:65:
00:40:74:68:6a:14:de:ab:6c:dd:62:98:41:81:38:
b2:18:b1:91:a6:ae:c0:37:e8:06:3b:82:c8:ec:48:
31:ac:00:8d:9d:b3:37:5c:0d:c9:d0:38:ae:07:95:
3a:9a:6f:2d:c4:c3:b9:ba:55:22:2a:19:b8:5e:c8:
3a:08:07:06:38:8e:0a:52:1c:a7:ba:51:cb:63:4e:
69:b8:11:4e:ef:c2:3e:1d:dd:62:19:b2:f5:cf:fd:
7c:73:92:1a:0b:a3:c5:b2:0e:6a:eb:92:fd:73:1f:
2a:02:be:e6:c5:ac:e4:1b:5c:57:80:87:18:d0:6e:
fb:ca:46:d5:00:9f:34:be:bf:6b:fc:c6:02:68:6b:
07:67:7d:2a:19:fe:46:f4:4c:a3:15:93:fe:5e:3b:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:7F:FC:54:AF:1A:70:48:0B:CF:ED:E1:3F:9F:56:93:4C:A2:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e040::/48
Signature Algorithm: sha256WithRSAEncryption
89:12:4c:46:11:08:5a:4f:dc:b5:23:16:3a:82:9f:f2:52:85:
b2:e2:70:3d:53:9c:fb:b0:84:2f:b2:71:de:3c:55:b0:11:12:
94:4c:52:c2:52:e4:62:91:16:38:75:b9:f5:95:40:88:98:62:
c5:de:13:0d:f3:c0:75:f1:94:4e:60:dd:8b:10:3e:95:b6:e7:
31:10:db:d0:33:a7:cf:8b:72:a8:8c:e2:ad:6a:81:99:fd:f1:
da:8c:26:61:a7:e8:5a:fa:43:6f:2a:a2:b9:c7:a1:67:1a:44:
21:40:59:7a:73:04:8d:64:3c:7d:53:e8:47:a3:da:80:e2:5d:
be:ae:9b:fd:20:9a:ae:48:6f:bb:84:40:06:9a:f7:4b:34:64:
ec:31:68:85:e0:53:86:30:9d:e7:2b:70:e2:3e:59:d2:c5:44:
67:67:26:64:a6:1c:68:30:cc:ff:eb:d1:2a:ef:95:aa:0d:f8:
9b:ff:d0:ef:65:4c:0c:0b:1b:b9:df:34:4a:cb:e3:65:13:3e:
59:a6:10:94:fa:06:77:75:9b:b7:3f:73:6d:3a:8f:1e:5e:ba:
61:05:9c:cf:7d:24:02:2d:13:e7:56:48:63:e8:36:18:37:55:
c4:53:ce:a6:9f:9d:43:30:be:99:c9:1d:d0:36:9c:30:21:bc:
05:30:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:54 2025 by rpki-client