Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9e2e2dd-303b-4e70-a84b-e795268ed9bb.roa
File: d9e2e2dd-303b-4e70-a84b-e795268ed9bb.roa (raw, json)
Hash identifier: oJNT3+N1hk1MPNwBuqRW9cGrA1BgBN88DVlPxGIgYnE=
Subject key identifier: 2B:BE:DF:00:EB:CB:9A:73:F0:F0:3F:97:6A:E9:C8:79:0B:BC:6E:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 105F6164603ADB5C61833A1AEE111466516352A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9e2e2dd-303b-4e70-a84b-e795268ed9bb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5f:61:64:60:3a:db:5c:61:83:3a:1a:ee:11:14:66:51:63:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=16d2442582f9f04d5ff31387a5dffcc19ddebd82e69a88086a83e4ee3a2b2d35, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:47:f2:9c:d9:60:d6:b9:72:16:b1:c6:23:
2e:58:74:84:3f:03:41:f9:17:4b:e5:70:3e:9a:cf:
9f:e4:9c:e9:6b:cb:53:48:72:00:7a:26:31:cc:75:
dc:7c:74:b5:85:2f:86:b8:07:62:2e:5f:da:3c:db:
2b:fe:d6:0c:48:17:8b:d3:73:93:91:50:5f:6e:3a:
5e:12:d4:1f:d3:77:d0:0b:a3:d2:be:42:69:8c:ab:
81:a1:ef:c2:33:1a:ca:05:01:39:05:32:55:fc:04:
83:07:3e:30:65:56:7a:02:b6:55:36:1e:51:30:41:
b5:bc:dd:27:b5:a1:e5:dc:67:08:2e:5a:7e:45:8b:
02:fb:37:89:ac:76:be:2c:4c:1f:9f:84:b6:60:b1:
f6:71:4d:53:c5:b0:b0:26:49:b3:56:86:5b:38:fb:
c7:e4:70:a7:ae:d1:77:52:3d:21:40:6f:01:65:6c:
92:97:2c:e7:c7:51:39:57:b6:3c:b4:f7:3d:5d:10:
66:ff:4c:4c:6d:e8:8f:77:fa:92:33:5a:14:23:a2:
00:98:e4:6b:77:9b:4d:dc:88:40:5d:07:68:c7:c2:
5f:f7:f4:2b:ad:c5:b5:2c:a8:a7:b4:81:ec:7b:7c:
aa:0a:e2:eb:1a:ce:b0:a5:67:31:da:03:e3:89:7f:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:DF:00:EB:CB:9A:73:F0:F0:3F:97:6A:E9:C8:79:0B:BC:6E:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9e2e2dd-303b-4e70-a84b-e795268ed9bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2000::/40
Signature Algorithm: sha256WithRSAEncryption
98:fb:83:50:77:19:73:cd:80:7d:3d:6e:1a:36:32:49:6a:e6:
49:88:2e:af:8b:68:20:43:46:97:5d:60:e4:0d:36:b6:54:45:
8c:64:98:19:d0:be:25:03:36:0a:5c:3f:9d:be:f8:bf:b6:a3:
2c:55:75:a6:fb:d3:5f:a5:fd:ec:07:e6:7c:01:62:58:6a:eb:
2c:eb:40:21:be:59:65:e5:cb:07:fe:33:6f:b6:86:ed:f4:46:
0e:a2:1b:fe:2c:3f:07:97:fe:75:41:5a:ef:60:d0:42:fc:04:
ae:79:32:60:39:e6:a9:7b:50:43:f8:35:ca:f4:79:78:f0:0f:
fe:31:c7:5c:23:43:0b:35:45:f4:3f:19:7b:09:ab:bb:db:31:
67:24:fe:21:fa:47:30:2b:79:c6:4b:41:76:ec:4e:b4:23:53:
d1:87:7a:7f:01:6f:7d:0b:2c:3c:89:a0:69:ab:db:3d:e2:a7:
b7:62:1a:a6:84:0d:f3:73:00:46:92:7c:23:4c:78:33:fa:35:
41:1c:71:f1:7d:77:1b:b9:b5:12:59:d1:1f:5c:b3:3b:2c:04:
97:b3:bf:9e:26:27:52:e8:07:05:c3:41:ad:c9:d0:d1:60:4a:
e9:4b:d8:27:a7:0a:bc:8a:3b:a5:11:ab:bc:c3:c7:c3:f8:dd:
7b:a7:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:37:13 2025 by rpki-client