Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa
File: d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa (raw, json)
Hash identifier: Amr3CRpl3KOnZcPLz5vLjHL/vOw0sx1krtiB+BmddeI=
Subject key identifier: 5E:27:2D:10:A6:DE:47:E7:C6:BE:EF:D4:A3:5F:26:63:76:8F:11:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23BF8D8B66A17659657F639CF73B9466DF40EA6A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:a040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:bf:8d:8b:66:a1:76:59:65:7f:63:9c:f7:3b:94:66:df:40:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9fb9fc8527084bf31799f7505a6169981d73759b15e9a2a311486556b3b59c3a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:45:73:18:47:a2:43:c6:04:64:ca:72:8a:
7f:78:70:0a:95:28:cd:3a:9a:da:71:63:09:6c:62:
09:02:84:e8:c1:70:bb:cf:2e:ee:cd:56:b0:f1:9e:
b1:f0:04:b1:bd:76:90:fc:a9:21:03:b0:80:07:c5:
fd:62:8c:aa:01:be:9f:a4:9a:82:6c:74:55:10:4b:
91:18:b2:13:b1:2f:a2:82:02:b9:e4:00:c3:68:c8:
f4:97:7b:75:be:64:79:6b:e9:13:97:21:8a:a5:b9:
f3:d3:a4:e9:2a:f2:94:3d:97:4a:c2:ea:32:47:35:
81:e9:26:5c:d4:6c:da:ef:38:7c:cf:42:7d:75:06:
87:e3:48:0a:0b:56:dd:76:a3:fc:d2:1e:01:12:dc:
c5:c0:ab:b0:f5:39:e4:c7:05:da:b1:fd:8e:eb:fe:
0e:77:68:4a:e6:eb:65:3f:69:42:67:32:cd:4c:93:
3b:7f:d0:50:94:ff:e3:69:59:3b:ac:a6:60:37:42:
84:dd:52:43:18:03:8b:97:bd:ec:aa:75:22:d6:2e:
25:72:36:6a:0f:5f:ab:ff:98:00:ed:b4:b9:4f:3d:
09:41:bc:b9:56:4b:4b:8f:66:25:53:c6:e8:ba:8b:
54:bb:4f:da:fe:0b:05:e1:e0:4a:b4:4c:05:44:51:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:2D:10:A6:DE:47:E7:C6:BE:EF:D4:A3:5F:26:63:76:8F:11:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:a040::/46
Signature Algorithm: sha256WithRSAEncryption
37:3f:e8:32:59:b2:14:1d:49:31:33:cc:50:4e:3a:63:1a:61:
82:de:3d:28:50:70:d8:a9:12:51:d9:87:b2:01:f6:c3:79:80:
8b:dd:30:1b:a0:72:8a:8e:8f:6f:ff:c3:c9:65:a8:f2:ca:65:
05:61:0e:2c:6f:65:a9:6a:90:35:18:4e:1e:f9:e1:b9:1a:e3:
ab:73:68:4a:8e:f5:a2:4e:7b:07:b6:92:94:7f:fb:1b:33:a3:
c8:ef:61:2e:1a:dd:05:0a:c8:a1:c4:46:96:89:49:fb:07:f8:
25:ab:03:e5:1f:b0:8a:fc:4e:8e:1e:ca:75:ca:3d:e9:01:d9:
a5:7d:48:e5:b3:db:cb:4e:9e:8d:a7:42:dd:cf:1e:7d:8f:fe:
2d:f3:c4:19:f0:f1:09:6f:28:df:05:8c:78:49:df:d2:6d:4f:
a3:b0:77:58:de:ca:d6:aa:c2:d0:93:0a:25:36:ac:33:56:55:
5d:76:1f:e8:a7:ec:c3:8d:6e:b6:eb:3f:a7:81:37:fb:f1:38:
cc:36:92:6f:1a:9c:ae:8e:97:3f:3e:c1:70:19:f4:ba:71:60:
71:1a:52:bc:5c:37:13:2a:7e:4d:67:be:a9:ca:43:41:43:1b:
b2:c8:3c:6d:9b:27:53:08:36:c8:76:8e:c6:99:8a:d9:77:54:
2e:45:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:58 2025 by rpki-client