Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e17dcec5-9d55-4765-8f83-957d1f5c0010.roa
File: e17dcec5-9d55-4765-8f83-957d1f5c0010.roa (raw, json)
Hash identifier: w3g4Vfv+vvMeT5sd0pynGX3bvVvqWxIuNi80lqoFq+0=
Subject key identifier: 4F:81:93:2B:49:03:BE:09:E8:0A:31:62:32:37:49:4B:67:90:15:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CB5175C066DB7584B466F8D5FB6202FAC4F6675
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e17dcec5-9d55-4765-8f83-957d1f5c0010.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8020::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b5:17:5c:06:6d:b7:58:4b:46:6f:8d:5f:b6:20:2f:ac:4f:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=07b06d9319c15a07373a96fb7cbe5abc045fa4cf9d622cc492db53a8c2af4dcf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:38:d7:ea:da:03:43:ab:85:93:ed:5c:d4:
06:a1:55:bf:1a:f0:09:07:1d:b1:f0:86:12:fe:6a:
cb:85:39:a7:b3:10:7b:64:c9:a4:92:fb:80:fc:16:
ae:7d:3f:9d:f3:df:6f:bc:4b:b2:81:16:de:d5:e7:
2a:af:b7:5f:89:4a:2b:50:60:b8:b0:dc:dd:bd:73:
a5:24:f1:fb:e0:08:9a:30:e5:5a:2e:ca:f5:06:6f:
a9:f0:b2:b0:b3:40:2f:56:7a:7d:9e:83:23:ac:82:
ef:15:67:cd:2e:d1:8e:ac:93:88:4f:d7:24:15:83:
6d:68:af:3e:28:67:c0:c3:74:0b:0e:ef:f7:fe:eb:
e7:1d:04:bf:7f:90:ef:03:cc:c4:38:35:1a:02:f1:
97:3b:9d:6b:72:24:e8:bf:93:bf:01:16:f8:75:36:
f5:98:35:94:68:04:5b:de:18:a2:e7:43:11:29:93:
13:35:04:cc:44:2b:11:4c:a5:23:f0:5a:17:6a:c0:
a5:b0:16:9b:2a:3b:55:b7:4f:35:52:e1:fc:49:73:
8d:53:0e:8e:1f:31:58:88:45:28:44:9e:d0:1a:80:
54:22:45:1d:17:ce:7c:5a:b7:89:0a:91:2e:01:8c:
51:5d:99:4c:ad:0a:9e:4a:a8:d1:55:f5:d2:16:5e:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:93:2B:49:03:BE:09:E8:0A:31:62:32:37:49:4B:67:90:15:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e17dcec5-9d55-4765-8f83-957d1f5c0010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8020::/46
Signature Algorithm: sha256WithRSAEncryption
94:b7:66:be:67:e9:b1:1d:16:19:37:26:29:9f:d9:cd:f3:ea:
2d:62:51:1c:c4:ee:25:22:cf:5f:8d:f7:fd:6b:22:0a:24:1a:
2a:d7:ad:0f:b1:fd:f5:ce:31:23:ea:3e:21:ae:fc:d0:a2:49:
9a:97:e4:19:94:7c:16:37:5b:b9:fc:0a:9c:09:7d:ab:bc:ba:
b0:92:a0:f0:83:e4:70:f4:b4:2d:a9:fb:e1:10:7b:f3:af:fa:
6f:8b:de:40:b5:4c:af:89:8e:4e:60:36:01:fb:48:47:56:77:
05:19:e2:dd:df:c7:8f:0c:76:8e:4c:82:39:84:be:ba:d5:a0:
1a:fb:26:9a:c7:d3:09:e9:68:73:fb:59:95:e0:81:da:2d:eb:
98:ad:c3:d5:56:51:97:e4:fc:3d:4e:da:79:42:e2:e7:ec:5e:
c2:f4:4f:e0:cc:83:6c:98:66:54:9f:66:c8:86:b4:6f:55:6b:
f8:77:14:6b:88:d5:91:7f:d1:2f:31:3f:ad:7d:35:38:65:51:
05:d2:37:0b:9f:4b:c7:66:fa:86:37:43:e0:49:90:2b:8d:ee:
c5:6d:07:ae:63:d0:00:02:0c:ca:3a:a3:8e:96:8c:01:91:66:
e2:40:ca:1e:bb:2c:ad:2f:f0:01:15:c9:92:5d:5a:05:4e:eb:
8e:49:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:38 2025 by rpki-client