Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json)
Hash identifier: /1n6re84Pllhjv5DGTSKOpPXmfHvoPDr0D3LLO5e8GQ=
Subject key identifier: C1:03:A1:FD:10:E2:01:20:32:AF:6E:12:4B:B9:05:26:95:3D:34:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 539E30C424776C701BC89E994C220C140C992C2B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9e:30:c4:24:77:6c:70:1b:c8:9e:99:4c:22:0c:14:0c:99:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=9bf21e57c5c26695b87d7ad9cb603699cc9f5ab4a523f1e78ab9e9e94feba470, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:f5:92:d5:a0:d2:0c:54:c6:a0:cc:e7:b6:
54:f4:7b:49:90:89:a1:52:c5:0c:46:af:af:c6:30:
4d:b9:ec:03:d5:06:18:60:fe:2d:1f:6a:8a:41:24:
3e:86:ee:a6:f8:18:38:d6:a0:f9:a8:1b:db:35:c5:
f4:43:fb:30:2a:0c:c0:9a:74:1a:dc:4e:59:00:b4:
1c:d5:68:b2:d4:d9:0d:67:6c:da:71:cb:c8:3a:7f:
e7:90:4a:11:03:02:49:f4:16:06:a2:99:ef:73:f2:
3d:39:d3:ad:14:00:9e:a7:b2:76:7a:f6:c7:0c:ce:
5c:7f:79:ab:0a:02:67:29:15:be:18:27:55:9a:a6:
6d:66:f8:1d:4e:fd:f5:5e:08:7d:99:a7:96:37:f6:
63:7c:06:58:c7:3d:21:8c:34:b3:3e:d7:b2:62:ce:
fc:5b:96:57:a7:8a:d4:cf:73:06:57:80:80:c4:98:
0b:2f:54:98:25:3a:53:41:f4:3e:4a:2b:12:d6:ae:
0e:3c:02:61:9c:00:59:b1:c8:aa:31:0d:6b:4b:4b:
39:28:da:e8:ab:6c:d7:99:4f:94:eb:01:b1:ff:df:
cc:86:01:96:7e:30:65:43:81:bf:66:dd:e8:85:5e:
5d:c7:e2:31:26:f8:4b:98:c4:cc:a8:b8:dc:a6:88:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:03:A1:FD:10:E2:01:20:32:AF:6E:12:4B:B9:05:26:95:3D:34:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
36:53:4a:f4:34:fe:0a:6b:2b:08:63:1f:3e:b0:95:de:e5:5b:
53:4e:a6:d9:d3:77:9d:c0:40:2e:a3:89:7e:24:71:5e:32:9b:
a4:01:fd:cb:de:92:e5:ed:d1:ba:43:e6:ef:7c:11:2e:a4:6b:
32:80:98:6d:70:9b:91:3a:9b:85:6a:74:66:2d:5a:2b:13:3a:
70:eb:1f:13:89:ab:ea:65:1e:ad:3c:e6:5f:42:ef:5e:28:51:
dd:4f:1f:7c:d7:4d:86:fe:03:89:7d:29:40:cf:ef:fc:c0:d0:
9c:02:e1:05:db:36:2b:ce:6b:01:9c:e1:ab:af:fa:81:8f:49:
e2:a1:d9:69:6e:b7:91:cf:f9:5a:d5:df:08:f6:c8:53:c8:45:
64:53:c7:aa:ae:c0:d4:39:0e:20:c3:15:98:5a:f5:f5:33:e5:
95:bd:fb:cd:29:9e:89:7f:fb:52:f3:ba:95:83:b7:f4:cf:fc:
c8:8f:5d:a5:5b:b0:34:69:0a:07:3b:e1:86:91:24:c1:e3:04:
8f:73:56:f1:aa:6e:74:c0:ba:68:9c:2d:83:65:cd:c1:5f:c4:
a6:09:79:50:16:59:b8:dd:7e:f1:85:9c:59:35:52:75:17:62:
12:a6:9e:4a:45:f4:93:01:c7:17:fa:ba:89:04:5f:97:5d:3d:
32:7d:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:22 2025 by rpki-client