Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa
File: de6578a7-816f-468a-acf9-83781a3b3769.roa (raw, json)
Hash identifier: nJPTVoMZ8AzSdJam/72B+g/ATfuIgKfWLc9A/WJPdlw=
Subject key identifier: 38:7C:9E:44:A2:77:C4:01:19:6C:2B:30:32:4C:08:64:DC:72:06:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 552832A09C1F3698B4749BD735A32B3E98810C97
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:28:32:a0:9c:1f:36:98:b4:74:9b:d7:35:a3:2b:3e:98:81:0c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=343717eedae9a274a77c9d0cc022fb1e99f62f8a256073c309b49e82fa61b0fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:4b:5a:94:40:6b:b0:e4:d7:1c:ee:62:95:
55:b1:c5:a3:5a:bf:f0:77:6f:07:47:a1:1e:7b:5a:
8f:03:fb:e5:e4:1f:aa:76:b2:90:e7:ac:d1:49:dc:
5e:11:33:5b:46:54:51:4f:83:34:82:20:85:55:ab:
1b:5a:27:a0:e7:3a:b4:92:f4:c7:39:48:9e:47:c1:
bd:2b:20:2b:05:0d:be:fa:c3:07:99:db:ea:46:ce:
79:d2:e7:fb:de:a8:9e:2c:80:f3:91:a9:d0:08:ca:
69:44:9c:d8:97:c1:f8:fe:09:02:b8:ac:b9:a4:00:
64:d6:bc:65:57:9c:b9:c1:cc:55:08:30:5b:1b:46:
6b:bd:81:c1:49:25:de:bf:ac:6b:ba:a2:55:15:cd:
25:fd:81:81:a2:f5:88:3e:53:52:8e:4a:ff:a0:cc:
fd:23:f2:a7:6f:2a:a4:84:8b:6a:f7:4b:02:6a:96:
63:a4:fb:c2:f2:87:d4:e9:21:98:af:62:d9:c6:9c:
49:84:84:75:17:cf:34:2e:2d:6e:a8:0b:cc:94:64:
f1:53:fc:62:88:ba:7b:ed:8d:0d:c9:9b:40:0c:26:
8b:65:72:7a:a8:0f:9f:ce:94:19:94:c4:69:87:d5:
b2:9c:8c:5e:ef:f5:36:85:b6:9c:de:6b:de:a3:b4:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:9E:44:A2:77:C4:01:19:6C:2B:30:32:4C:08:64:DC:72:06:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:84:e1:61:bf:56:0d:10:71:2f:47:2c:23:44:83:ee:f6:34:
22:2f:04:e8:24:4b:f7:81:9b:3d:d9:fb:40:cd:28:fe:b0:be:
db:dc:f5:03:88:bc:dc:f3:7f:c5:b1:94:9d:c5:24:35:4e:04:
eb:98:2d:c5:3a:f8:d4:52:d5:38:3f:13:e6:ff:c3:ed:de:db:
5a:a5:1a:cc:7a:b2:57:3e:a1:cd:b4:20:15:dd:4f:7a:ab:0e:
84:1f:4e:f6:7b:a2:22:f8:17:59:16:78:c3:c2:fe:b3:e1:22:
01:8e:77:7c:32:bb:91:35:7a:46:20:35:5d:b6:94:5f:b1:76:
1f:71:44:0c:e9:ef:2c:a1:eb:0e:40:45:f8:6f:8f:e2:7a:aa:
d3:b7:ad:72:ab:c4:95:01:71:18:b9:86:0b:a2:32:ed:8d:0a:
21:ea:19:c1:ce:7f:15:fa:a7:a5:e0:43:0a:68:ca:69:7a:9a:
66:20:6b:e0:30:a7:e9:2d:48:9e:92:33:4f:73:cd:03:f0:6c:
f8:1f:75:55:21:8e:30:85:ae:2f:45:0f:7e:1d:f5:a0:3f:bd:
99:51:76:b4:13:b9:8f:3e:48:cf:9d:bf:23:92:2a:7e:3c:ab:
c3:05:be:f6:53:0c:f3:05:24:89:6f:2c:bd:20:38:69:a5:e6:
3b:e7:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:55:45 2025 by rpki-client