Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
File: d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa (raw, json)
Hash identifier: Kg9HKD1rGpQvq28a4xTNE9hqJC7wXBtgm0CAXrOCCaI=
Subject key identifier: 36:AA:FF:43:8F:4D:88:25:42:78:CA:29:3D:6F:EB:29:02:01:5C:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69510615F0AD3EA57CC249B7F8E8EEA32E07025A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:51:06:15:f0:ad:3e:a5:7c:c2:49:b7:f8:e8:ee:a3:2e:07:02:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=46567c482eab9df14f426b267d6e2527b142f760e580d63df9bf2d9c1639f30c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:eb:c3:2f:26:4a:e6:3f:e2:a6:d4:b9:94:
44:10:84:97:a5:bd:b0:74:1e:7d:87:49:5c:6d:58:
46:93:4d:48:31:5b:5d:be:b7:d1:06:df:02:3f:18:
83:ac:e4:47:de:14:91:55:f0:ff:c8:a7:96:00:62:
86:c3:e4:10:08:20:99:59:4d:89:e2:89:1d:75:8e:
ed:32:23:2d:d9:4a:93:28:a4:cb:11:74:68:52:f3:
b7:d8:ad:be:d2:3c:6d:ab:21:6c:5c:4c:17:0a:76:
49:91:11:56:8c:ba:14:e0:b9:49:b2:f0:a2:34:11:
d3:f0:71:35:b6:ae:e9:13:a3:5d:30:9f:27:62:db:
6c:c9:89:66:55:37:48:d8:6d:9e:e8:2a:58:47:2f:
6f:b9:83:ff:2c:e3:3a:b2:39:e9:b2:29:cd:6f:9a:
18:03:64:00:0f:0a:b0:8e:13:41:f3:9f:22:08:42:
c4:2b:b5:e2:18:e8:e4:8f:b5:7f:4f:eb:4b:87:44:
5a:1a:a7:a4:fa:9a:0e:70:97:ed:24:64:99:e6:69:
01:0e:77:a9:09:af:9a:70:32:4b:4d:1b:ee:a1:f4:
d0:ce:87:c4:3e:db:46:67:52:3b:42:33:99:8c:7c:
b4:e1:98:a8:7a:45:75:69:51:01:2e:b6:40:90:f7:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:FF:43:8F:4D:88:25:42:78:CA:29:3D:6F:EB:29:02:01:5C:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:1000::/40
Signature Algorithm: sha256WithRSAEncryption
16:a7:6d:14:50:81:20:01:70:50:8b:29:4e:0c:2f:f7:2d:54:
65:0b:c6:55:fd:5e:78:0d:7e:6a:6d:a4:59:c5:ca:fe:13:e2:
fa:ee:e4:ba:ea:e1:91:b7:5e:69:09:5c:f1:e0:da:f7:34:13:
13:06:05:cd:d3:2e:3d:d5:40:2d:65:f6:d9:ae:d5:dd:47:4f:
fc:1f:e1:e0:c2:7d:2e:8e:e9:18:a8:8b:c2:4b:4b:45:22:bb:
c7:23:06:39:34:27:11:5d:eb:e3:15:3a:40:aa:3f:71:4f:5b:
5e:e6:67:cc:f3:80:3c:2b:e2:1c:04:2d:7a:9d:9d:a4:c0:49:
aa:8a:08:54:8a:dc:7b:22:b8:55:88:2f:d2:0a:5e:f3:d1:df:
33:f1:49:57:62:09:3c:df:81:aa:6c:2b:40:09:dc:ce:2d:ba:
75:3a:bb:08:e3:68:ce:77:1d:7e:35:c2:5d:c1:83:7f:0b:1f:
ea:53:8e:ff:2f:dc:29:02:61:1b:8f:41:4a:7d:00:ed:83:6b:
c0:d0:fc:8f:cf:bf:72:0e:0d:67:d7:22:da:07:3c:68:d9:3b:
fc:48:53:18:cf:e0:df:4d:01:d0:47:14:cf:2a:28:ad:d5:2e:
36:77:d4:77:15:d7:5b:2a:4a:ec:aa:1f:83:cd:b6:28:8f:bf:
73:67:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:45 2025 by rpki-client