Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
File: d93d911b-44fc-4994-8910-e2c5ecc33624.roa (raw, json)
Hash identifier: +g25kDA/LHLt9lu9nGrDPnR39XjhKXnxLCnQIMH9COE=
Subject key identifier: 70:08:32:77:DD:80:D4:D4:73:DB:74:A9:0D:00:36:03:08:C3:ED:DD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F94A0FDE0E5D5A332A9C46DEFA5D2931A3CE0CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:6080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:94:a0:fd:e0:e5:d5:a3:32:a9:c4:6d:ef:a5:d2:93:1a:3c:e0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=e2e108761552ffb0f74cc88f795c5e92f6b720a5acf551d029ee354f52fb98b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:79:3f:e6:8a:e0:fa:49:6a:9e:94:b7:e7:
89:17:ee:07:90:e0:a5:e3:c3:cb:8c:6c:d1:db:62:
ce:e4:28:87:a0:a6:2e:a9:a7:78:30:49:29:ab:48:
93:81:7c:1a:10:e1:85:a5:60:fe:a1:b8:a8:4a:8f:
a7:ee:49:a3:02:24:0f:24:12:5e:6b:b9:87:57:53:
37:d0:ef:41:cb:ed:c1:e9:06:ea:b8:39:f4:94:a6:
ff:93:a8:61:b2:fc:94:94:66:22:34:6c:ff:ee:12:
01:da:97:fc:7a:b9:4d:28:1c:8b:87:8d:71:6f:57:
18:6d:df:5d:2e:07:45:5a:d4:ad:30:0b:7d:86:e7:
d6:b7:30:0c:81:0d:ee:d8:30:8f:29:f9:6d:e7:e7:
e5:67:30:f9:29:c9:d2:22:5f:89:c5:0c:fe:59:ca:
b2:dc:0c:99:52:47:d0:12:53:58:4d:84:a5:93:8e:
31:b3:88:2e:21:e5:0e:68:31:13:b8:45:6f:3a:d8:
78:a4:64:5c:88:eb:ed:9b:7f:3e:82:4a:39:56:ea:
ad:c3:9e:cd:18:20:cd:b3:db:87:ba:e5:27:ca:bf:
f9:a1:17:5e:bc:d2:92:f6:74:c7:db:02:bc:01:a8:
d0:b4:1a:d4:d6:b4:9f:79:bc:3a:83:fd:a1:72:a6:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:32:77:DD:80:D4:D4:73:DB:74:A9:0D:00:36:03:08:C3:ED:DD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:6080::/46
Signature Algorithm: sha256WithRSAEncryption
48:4a:ab:f0:06:0b:75:cf:3c:1c:bd:12:d0:54:d6:39:1d:ec:
74:ac:2d:fb:da:54:cf:30:e7:7b:07:2c:91:0a:27:e1:7f:e2:
a2:7b:6d:b1:1e:c2:7b:ba:94:8f:a2:7f:79:84:ce:51:c8:fe:
58:5e:cf:80:d2:d2:86:f9:90:41:a4:c4:7b:35:25:af:c2:24:
0d:07:72:00:b3:48:38:15:38:27:2f:b1:bb:a6:71:68:3e:c3:
d3:52:9d:1f:98:33:12:f6:1f:8a:54:d7:16:87:af:ea:6d:64:
7c:b5:eb:e0:ff:d5:2a:4c:ff:e6:0f:61:1c:cf:43:86:8a:20:
b4:1c:27:d5:c6:a8:4e:79:67:dc:c0:b5:ba:6d:40:8f:41:27:
7b:71:a7:0d:92:de:75:5e:ca:31:52:83:dd:4b:24:54:fa:fc:
9c:7b:75:cf:25:21:d6:09:26:4d:63:65:81:b4:46:0c:ea:cf:
ea:93:ca:bb:12:19:b2:82:1b:9c:07:a2:87:d6:e6:0a:a0:be:
48:c0:ea:9e:22:ef:58:48:8c:3b:5b:66:0b:8f:ab:57:b8:4a:
ba:4e:db:a5:ff:a1:79:1f:2a:05:dc:0a:0e:69:9e:fb:e6:ae:
da:88:71:bd:d0:83:17:cf:be:ce:ae:36:ae:a0:1b:10:79:1f:
d9:c2:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:12 2025 by rpki-client