Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
File: d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa (raw, json)
Hash identifier: d0aGWBwMElKGDWwenTXPuUd1qDg21/PRt1sp3ChN/zU=
Subject key identifier: A6:E4:28:15:37:13:26:7D:90:2B:A2:09:9B:F8:7F:6A:09:FE:F4:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 505B441B552F99457E6562874DB50935CA13A651
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5b:44:1b:55:2f:99:45:7e:65:62:87:4d:b5:09:35:ca:13:a6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3f763e876a4b73b206a092121e500cfa470a9d1af0528955c3d35ecc820a8189, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:7d:0f:1e:c8:d7:b4:a6:b0:a9:f2:4a:3f:
7a:71:8a:32:17:47:89:8f:01:6f:5f:01:41:8f:e3:
01:a0:4f:64:a4:71:50:59:3f:26:b9:c0:1e:e6:ef:
7b:b9:9c:47:e0:04:0e:d3:7a:56:02:83:00:24:9f:
15:ec:46:a3:e6:5c:3a:9d:f5:78:1c:5c:a5:76:d2:
bc:2a:68:71:a8:a9:8d:e7:3a:cf:2e:b4:70:52:57:
83:42:21:d4:87:0f:f6:07:cb:85:22:65:5f:39:2a:
26:36:ff:cb:83:12:85:77:11:fb:ad:92:4e:d4:c3:
bc:05:da:9c:5c:93:69:58:9a:49:9b:99:50:36:ec:
44:10:9f:e9:d5:8d:33:28:bc:e4:28:1b:86:4b:03:
de:f2:7d:4a:e9:5e:38:a3:c5:1d:d0:f1:33:25:17:
b2:6a:a9:e3:34:b2:6b:9b:2c:8d:14:f0:39:9d:9c:
e5:e3:59:df:3d:0d:b3:10:fe:6c:7f:f2:64:c7:28:
d5:80:de:cd:16:5a:12:75:48:6c:97:e3:e0:7e:c4:
d3:f0:55:4c:fb:67:e8:9b:bb:8f:c7:2c:ce:de:34:
4c:4f:98:fc:a5:7a:62:43:1f:93:65:76:3b:8c:3a:
a6:18:f7:d1:68:b9:82:28:c0:0e:79:e0:5a:f3:c7:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:28:15:37:13:26:7D:90:2B:A2:09:9B:F8:7F:6A:09:FE:F4:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:400::/38
Signature Algorithm: sha256WithRSAEncryption
a0:0f:a0:db:9f:f7:d6:fa:68:36:d1:36:a4:01:01:80:e0:a9:
af:aa:b3:e5:73:d8:04:c2:c0:33:13:d3:a1:02:14:7b:ac:36:
06:eb:98:3d:2c:81:37:26:93:40:3c:6b:cc:09:25:69:85:fa:
bd:ff:53:d0:9a:e1:7d:83:6f:14:40:2c:33:b0:49:04:9d:09:
73:ca:25:04:27:79:77:b7:eb:8b:34:d4:78:c9:09:53:de:ba:
15:15:be:81:53:72:66:79:99:b0:bb:dc:c7:c4:4c:4b:bf:74:
0f:81:68:6c:b3:e0:e3:10:52:d5:a1:8b:dd:08:84:69:da:d3:
ad:40:d6:b5:fb:d1:5a:41:9e:19:d4:5d:fb:65:ba:83:a4:8b:
13:4e:8d:8d:cc:63:87:aa:32:49:da:55:20:1d:c4:b6:80:56:
cc:72:9b:cb:93:f6:42:a8:64:ca:ea:a0:32:98:12:35:37:79:
b4:8b:d3:d5:8f:3b:22:a2:83:25:2e:fc:5d:1e:34:c1:8c:c3:
3b:15:54:28:83:27:72:2d:43:72:ec:10:dd:ff:37:ae:68:a8:
91:3d:40:55:55:9c:e4:17:fc:80:e1:d2:c3:f2:5d:8c:63:27:
36:87:79:9d:be:8f:8b:ae:63:05:6f:72:18:86:ed:30:e0:83:
aa:7c:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:15 2025 by rpki-client