Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier: qUt4D3IYWh/xsf6+l2wiYJIMPL5SelgtrTg3BUXprbI=
Subject key identifier: 2B:2F:68:EA:D9:21:15:40:57:16:AC:3F:BD:5E:06:AF:82:48:EE:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26466ECF91AA42F5EF26E74F9B8DDFA9736F8176
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:46:6e:cf:91:aa:42:f5:ef:26:e7:4f:9b:8d:df:a9:73:6f:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f93bbfe16174e46b304844d2ea44c330590c9ebb3cbe93e0e7dfcd60e0c7fe7c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:2a:50:8a:97:b4:32:5a:ef:f6:04:8a:30:
97:a9:07:3f:9f:e9:a0:a3:27:43:75:47:d1:ad:d9:
0d:ca:70:bb:e1:e2:2a:1d:d0:34:ee:da:2d:13:36:
8c:dc:51:97:aa:08:48:9c:00:4a:a2:b2:35:2d:7f:
b6:36:d3:30:66:49:ae:68:9a:04:c7:ad:1c:a1:78:
38:b3:a1:38:45:56:03:b8:37:9a:ab:dc:b6:f3:c9:
00:c9:6f:05:ca:00:73:48:b7:8c:85:65:62:e7:dc:
85:33:1d:b8:0c:c5:11:56:c2:2b:8f:4a:d8:20:94:
89:6d:9a:4a:c6:dc:e2:c5:fb:2e:ea:22:8a:96:1b:
28:5b:5f:75:02:23:05:65:f9:9d:d2:eb:2f:81:44:
24:83:ec:fb:91:f3:08:a5:bd:a5:20:2f:47:ab:9c:
cb:1c:ea:c7:0d:f8:f8:31:45:a2:69:ab:d9:19:5d:
63:4e:a2:55:81:fb:9e:0b:75:cd:1d:9d:14:ae:0e:
30:33:da:7c:07:bc:a3:f2:74:f7:cc:b2:d5:63:e2:
28:1b:93:f0:45:84:ac:ba:15:20:7a:17:ee:43:d6:
86:91:dd:53:0b:1f:94:49:74:1d:e8:57:5e:27:bf:
de:ae:0d:28:48:6e:5c:c0:af:ec:91:1c:0a:c5:db:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:68:EA:D9:21:15:40:57:16:AC:3F:BD:5E:06:AF:82:48:EE:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9040::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a3:76:e0:91:76:91:10:17:e2:29:34:39:15:c6:ce:7f:e0:
d8:54:48:81:dd:ce:28:30:81:84:f3:95:f7:eb:c4:a6:df:db:
cf:dd:73:7b:cb:41:5b:d4:dc:5f:b9:42:64:08:9f:3d:16:34:
8d:ed:fe:98:53:af:69:64:dd:99:a6:99:10:5b:b5:9b:d0:4b:
0e:03:4b:71:ab:e7:47:72:6f:63:52:8f:c6:2d:14:11:3a:ed:
91:38:62:ef:a7:69:a2:e8:1a:90:29:5a:aa:e1:12:41:94:75:
b2:ba:33:7e:d2:d0:f1:8c:7a:5a:15:9b:c7:bb:b6:c2:bb:88:
bc:98:be:ad:ff:7e:e3:fb:33:55:49:ee:11:2c:04:98:4b:ab:
2b:3c:c0:82:4f:bf:6a:bf:90:8b:58:86:f3:bf:1a:a2:e5:65:
db:e2:7b:bc:d9:17:c1:48:c0:1e:a9:de:2e:52:6f:ed:c2:f5:
08:09:fb:76:c4:5f:67:d3:5d:0a:33:fd:71:f8:16:f8:9c:48:
5a:87:a2:5b:9a:64:0c:46:26:b0:63:2f:65:4d:00:bd:3d:a9:
82:51:7b:14:1f:90:f9:67:ed:fc:47:3e:63:96:a6:e2:19:a1:
53:f5:af:99:0c:a5:49:53:da:bc:4c:dd:91:e6:5c:52:a3:6c:
fe:19:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:42:59 2025 by rpki-client