Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
File: d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa (raw, json)
Hash identifier: UnUs+igiEHftUvz+y53R4S5CxkXb62TeX4TYPb+PXnc=
Subject key identifier: D8:F5:B4:45:A9:68:9B:24:E9:94:C1:40:FA:5F:ED:62:7F:FA:AC:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6969A98CB3D7397A3B1DA20F941F4EFFC852F997
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:69:a9:8c:b3:d7:39:7a:3b:1d:a2:0f:94:1f:4e:ff:c8:52:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=700cf4307599e33a60f5964b1573f58ac3091670aceb14e541f4e9d156832109, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:18:49:20:20:13:f0:fc:dd:8d:29:a1:fe:
37:3f:79:9c:8a:6d:19:39:64:6c:83:3f:6d:b6:91:
d6:ad:36:1c:6c:ab:61:f7:b6:10:51:a3:96:b9:d2:
10:00:e6:f0:59:02:c3:6d:08:b6:0c:07:44:4b:cf:
a7:2a:ef:39:76:1b:ee:56:35:4b:b0:d2:b2:55:c2:
46:c7:ba:85:13:d6:0a:66:75:b5:30:6f:e2:37:6f:
20:40:47:b9:fc:dd:f1:da:74:46:e9:35:ba:6b:4c:
4a:35:5c:e1:8c:df:6c:b6:3a:16:d4:4b:0b:01:33:
95:e3:1d:55:17:58:fc:2d:4f:b1:3c:0d:1b:4c:6e:
f3:19:df:d4:05:dd:e9:14:1d:bf:ec:d6:f5:ca:8a:
f6:6e:0c:bf:77:39:d9:b3:07:6d:87:c9:7d:b5:80:
62:7a:ca:d3:d4:ba:72:65:1c:a7:d9:2e:e1:f7:e0:
83:21:76:0a:1c:8a:9f:2e:58:1c:5a:da:77:0f:cc:
9e:ac:37:e5:c4:bd:8a:9c:cf:d0:0d:bf:ec:66:94:
3c:21:ad:18:a5:d5:04:e1:5b:f2:20:04:d4:e1:2b:
89:79:0e:5e:54:e1:d4:37:69:2d:9a:d9:f0:9d:f1:
9a:12:8e:b5:0b:df:cf:35:1a:c6:78:8a:dc:76:70:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:B4:45:A9:68:9B:24:E9:94:C1:40:FA:5F:ED:62:7F:FA:AC:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2080::/46
Signature Algorithm: sha256WithRSAEncryption
0d:d3:71:1b:f9:79:22:26:58:fe:fb:23:52:16:31:b7:46:30:
9e:c0:18:cb:00:2a:69:98:2c:19:8d:dd:56:06:43:44:67:28:
ae:25:33:f0:2b:0e:98:b3:df:ab:2f:5c:9f:43:cc:47:d0:8b:
47:b2:e0:28:ae:aa:fa:6d:d7:14:42:ee:10:bc:1b:f0:94:89:
36:01:14:84:9c:f5:bb:b5:6a:2c:bc:2c:7a:77:62:51:77:85:
85:7a:4d:e9:09:f4:79:66:b0:bc:1f:b0:53:88:53:1d:d3:4d:
c3:e0:c5:28:8e:fb:6e:5c:53:0f:c9:88:b0:36:30:b7:b4:57:
e7:e7:5c:57:6c:7c:63:d9:40:71:02:87:4c:22:f2:f5:43:4f:
a2:97:55:79:33:51:de:f4:0c:cb:ae:f1:94:f8:72:37:6c:ae:
5c:e4:95:1f:fb:c3:c7:f8:4d:b1:7f:d0:81:b7:86:87:48:6c:
12:1f:8d:04:03:ab:80:a8:cc:92:3d:d8:41:a8:a2:31:db:56:
01:07:0d:15:e6:15:a6:a9:73:38:74:93:dc:70:b0:5d:3c:e7:
3c:0d:22:a8:5d:c1:20:07:56:b6:cb:8e:e2:cb:e3:80:51:4b:
29:e2:51:72:03:67:e3:40:c5:87:82:83:c1:4e:8f:42:6d:17:
ea:15:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:01 2025 by rpki-client