Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa
File: ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa (raw, json)
Hash identifier: HVh3MzMb9KPsIrc4ObcojC/hKYlebFx3CO8M1SJLCKg=
Subject key identifier: A5:81:8E:A8:7B:CA:B1:81:E3:A0:1E:3B:72:7F:98:B6:49:6A:F4:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55731311AC32033525BF6D5DF638735448125C59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:73:13:11:ac:32:03:35:25:bf:6d:5d:f6:38:73:54:48:12:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=634cc7ad6b65129f157fa8af099c1deea4fb2219625197484d77ee4596d79321, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:a3:b0:48:62:63:75:02:6f:30:0a:ee:4f:
98:dc:70:dd:cf:16:e2:05:af:8a:15:9a:39:f0:97:
ce:e8:0c:b3:54:e1:4d:09:e1:4f:76:8e:dd:cd:28:
2d:70:34:93:5b:56:f9:a3:3d:8e:75:9b:f9:f6:7c:
eb:24:3f:50:61:73:16:8f:5b:e9:99:56:7c:13:6e:
a5:e1:3b:7d:ce:e5:5b:83:f5:70:a5:88:2c:d5:65:
54:ae:ab:c9:0e:02:62:9a:21:46:03:88:c0:6a:05:
3e:03:56:d6:c2:b4:a5:fb:72:53:7c:4c:53:4f:67:
26:b9:6a:4b:7b:30:03:8c:4f:38:61:39:5c:c7:83:
de:26:7f:97:f7:ec:25:4f:9b:36:36:b9:15:40:7f:
c0:98:96:0c:87:37:31:89:39:4d:8f:2e:6a:01:4c:
bf:a8:1c:a4:d4:78:fc:33:81:4b:b6:7c:95:9b:a5:
fa:1c:ff:e8:23:82:bb:12:10:35:06:db:c7:a6:32:
ab:58:17:a3:fc:69:eb:42:87:b5:55:29:6e:a1:84:
34:24:2f:f9:bc:27:a1:1e:f2:69:31:d8:69:e4:43:
e2:3f:7d:e1:7f:98:ac:04:b5:a4:e0:56:95:5b:c7:
15:37:b4:18:b6:27:d6:68:ef:5d:87:52:71:38:e6:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:8E:A8:7B:CA:B1:81:E3:A0:1E:3B:72:7F:98:B6:49:6A:F4:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1040::/46
Signature Algorithm: sha256WithRSAEncryption
41:46:b8:1f:3b:c8:60:81:c7:09:41:6c:6e:74:4b:14:b9:c8:
22:76:e3:f0:72:ec:61:46:5c:48:a6:3f:af:ae:17:0b:6a:5c:
57:5f:8b:8c:38:72:de:d0:95:a3:a1:74:04:15:b7:89:c6:b4:
b1:a6:05:07:4f:cc:41:5c:22:8a:d0:ef:7f:67:b6:d1:33:5a:
cd:3f:e9:54:c2:84:a8:7e:85:fd:da:71:8f:b5:dc:f2:84:0e:
6b:96:be:36:c5:1f:99:2c:15:bd:f5:0f:75:19:f5:af:1d:b4:
f2:c1:96:29:a4:f3:57:b6:6d:2c:08:e9:27:88:f0:bd:d4:39:
05:f5:0b:63:8c:5d:42:71:5d:e1:2a:f4:6c:4c:f1:32:3b:78:
c5:2f:a5:bf:ef:24:3b:3d:2c:8e:2f:41:62:1e:9d:72:a4:35:
9f:ec:19:d9:62:0a:43:29:32:de:2c:e2:e1:bd:95:ed:e8:bf:
99:71:a5:28:a7:5a:48:33:3f:a3:93:51:f5:dd:49:a7:ea:32:
32:33:f3:f9:8f:1e:d1:12:f6:30:86:a7:10:58:ed:21:84:93:
d1:b1:68:19:9a:96:b7:80:48:39:66:ca:03:be:46:4c:02:8f:
bb:21:53:a6:42:40:b0:d0:64:44:ec:b1:03:4a:12:66:49:87:
63:4b:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:43 2025 by rpki-client