Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa
File: d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa (raw, json)
Hash identifier: dsOW89T44y6lCdHa0eFr1kOIuqcKjncipEzVXh5j7w4=
Subject key identifier: CF:70:41:0A:C8:F3:DA:E4:F6:BC:42:24:84:FD:D2:7F:C5:80:A0:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 574E8E1DC8B5B59CAA010CD0BAE962DBB93CF2C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4e:8e:1d:c8:b5:b5:9c:aa:01:0c:d0:ba:e9:62:db:b9:3c:f2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1f38063a68ab8caed5dbb76827b44902228c5ceceee4f652a27cefcfed6c070a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:33:8c:1f:39:f5:df:6c:15:8d:a4:15:66:
bd:52:fe:dd:76:71:e5:39:03:ea:ca:7c:59:c2:79:
59:59:bc:e7:13:39:ef:19:0d:3d:89:95:dd:5a:0e:
f9:cb:15:76:84:e0:4c:11:67:84:87:85:3a:37:7b:
70:e5:b6:f0:ae:d5:33:3d:ef:64:2c:7e:de:3d:11:
00:f5:29:25:f1:64:6a:ff:7a:e5:45:04:d6:d8:73:
e7:85:1b:17:b4:e1:9a:6f:b8:57:fc:7d:d8:01:82:
46:06:80:34:9e:a2:ef:85:53:b3:4f:ee:62:3a:2a:
9b:c5:ff:90:8e:ed:50:62:eb:54:f2:e6:20:17:e7:
49:08:15:78:3f:d9:64:71:05:fd:5e:af:be:a2:b9:
d1:15:38:02:b1:88:99:7c:7f:5e:f3:da:dc:9e:0e:
61:d8:40:f6:fe:4e:83:09:ef:7d:39:a5:c2:93:08:
f2:ea:6f:7f:88:95:d6:4c:46:ed:99:7f:03:ec:b2:
dc:c9:25:45:1e:4b:7e:e9:b3:f6:67:a8:f0:64:c9:
a5:9a:5e:e7:70:32:54:96:25:b4:98:e4:a5:07:fa:
cf:c9:38:e3:d0:88:39:03:33:be:c7:43:fc:ba:73:
f4:33:45:65:2c:04:8a:a9:eb:8f:42:75:96:d6:92:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:41:0A:C8:F3:DA:E4:F6:BC:42:24:84:FD:D2:7F:C5:80:A0:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a040::/46
Signature Algorithm: sha256WithRSAEncryption
0b:9e:7d:13:65:f1:60:2d:22:83:e9:57:66:00:9d:32:27:ac:
c3:cb:3e:04:0a:9d:52:b2:93:a5:48:d2:b4:24:ad:91:1a:f6:
df:cb:9e:72:cf:9c:89:39:20:2e:28:eb:f9:26:70:37:57:49:
91:48:42:40:0f:ee:57:be:b7:93:5e:4e:da:8a:a1:b6:21:f5:
ad:97:fd:c9:39:28:8e:c1:d1:99:61:9d:87:0f:77:49:2f:e2:
83:c0:56:be:60:ef:c7:d5:52:4d:eb:fd:b9:24:78:8a:ea:af:
88:1f:27:ff:df:91:ad:db:6e:ba:b8:74:59:0a:57:d4:a4:83:
55:2c:cd:01:cb:05:ac:d1:8e:b2:bc:12:02:21:fa:31:ca:88:
ca:0d:fa:54:2b:f4:7b:c7:53:7a:88:ce:6b:ac:86:ff:85:b5:
42:ca:1b:82:8e:81:d2:c0:d3:21:2b:39:ec:07:78:3e:0f:61:
1c:b8:78:98:ca:10:0d:ee:a0:5f:7c:f3:19:59:09:a9:37:60:
6f:3a:45:fd:6d:93:b4:2d:be:12:b5:46:54:02:e1:e6:9a:2c:
f2:4b:0e:94:10:54:b3:6b:75:8a:de:88:54:fc:57:b7:43:b3:
66:9a:7c:29:9c:48:5b:dd:61:3b:18:ee:a2:69:4e:18:b9:c8:
b4:25:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:58 2025 by rpki-client