Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: nqsp9Omk76OQTH5TqNJvzZx3vkjGgwJ38zkrGOSmIKc=
Subject key identifier: B5:DF:03:1D:04:29:16:C6:D3:D7:06:4E:FA:87:EB:C9:D7:C1:0F:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D26D61ACCF6F84F37E3DFE5AC6BF0EF04BDC3CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:26:d6:1a:cc:f6:f8:4f:37:e3:df:e5:ac:6b:f0:ef:04:bd:c3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=1a17897846a99fa1d9490c690fd0ae97690fe3c4cd661f69af78bafe6f9dc612, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:ea:a5:ca:28:b8:1a:61:7d:49:ed:9c:0a:
e3:0a:45:6d:65:62:b2:58:86:5b:1c:e5:0e:6e:73:
3a:a0:60:1d:3d:d3:a3:33:98:5e:43:62:6b:bb:ee:
fe:5c:ec:9f:e2:66:b9:fa:2e:29:ca:f3:89:95:76:
9b:f5:39:68:8c:41:c3:88:c2:61:56:42:c9:4e:37:
ac:89:ef:49:6d:ed:f8:8b:aa:9e:64:ac:ed:ca:6c:
0a:8b:69:bb:e5:2e:fa:49:2e:bb:5c:82:c4:f9:15:
9c:02:19:95:be:97:1c:e3:46:a3:62:bd:cb:4d:42:
51:a6:3e:f9:e4:a4:48:e3:92:0a:48:f8:d9:4d:ed:
b7:14:7a:80:bf:82:ae:02:fb:1e:8e:2b:48:88:64:
e2:d3:6c:f8:9b:98:a5:27:20:21:6a:f0:fa:b0:87:
4c:83:3b:7b:ba:db:f2:b0:c6:d9:87:8a:5a:93:bc:
80:fd:33:c8:54:fd:9e:1b:84:a6:2e:a9:91:32:63:
22:77:13:c2:e3:fa:d3:da:ac:c1:38:25:d6:da:09:
4c:06:d0:5b:05:32:f6:09:7a:7a:87:ac:6f:f0:e3:
4d:67:94:4c:27:93:ee:19:ed:44:1b:6b:d5:ba:3a:
31:42:f6:4d:20:64:2d:85:c4:a1:55:de:25:0c:46:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:03:1D:04:29:16:C6:D3:D7:06:4E:FA:87:EB:C9:D7:C1:0F:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1b:b7:18:db:30:80:fa:3b:85:a1:c3:5b:fa:92:be:bd:8d:09:
e0:47:7c:cc:ab:3b:d2:a1:41:63:2a:71:2f:2f:54:0c:de:cc:
dd:6e:8f:db:fd:f7:70:23:61:b9:ae:a8:66:43:df:73:fd:98:
33:b8:7f:98:51:4b:ab:dd:b4:4e:37:01:d3:9f:db:33:f4:58:
c1:a8:c7:ee:cf:91:02:fa:74:b9:91:8b:92:f0:85:95:ed:f7:
7f:33:3f:1d:d2:16:c4:fc:2f:ac:18:78:21:56:2c:04:23:12:
4c:a6:11:83:50:8d:ae:2c:64:bb:81:3b:a5:d4:91:d6:ad:30:
99:7f:89:d3:01:c3:41:c6:ab:f8:b1:62:fa:45:0d:33:66:d8:
e9:d1:a1:bf:30:ed:49:7f:35:90:4c:a3:a9:bc:5f:b5:b0:6d:
5e:69:f9:ea:e3:bf:db:47:1a:08:fa:cd:2f:3f:8f:be:1f:36:
30:d9:c0:84:fc:77:ba:12:0b:f1:02:68:c4:eb:7d:25:4a:58:
e5:a2:43:76:3b:87:e8:5d:10:32:e4:d0:38:25:a8:fb:7b:97:
5f:2f:23:2d:8e:ed:fb:b1:7d:ff:b9:52:61:ae:63:8e:55:c9:
e3:8b:13:03:30:00:b9:f7:53:8a:e1:2a:9d:c1:74:ed:0e:81:
18:f0:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:43 2025 by rpki-client