Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
File: e396d806-dffa-4609-8ae4-1e8fdbde728e.roa (raw, json)
Hash identifier: Zvwhfg5IPZHhAEgds/q6/Dp/wfnSGf+uR8vj9izf+Bo=
Subject key identifier: D1:D9:8A:DA:88:E4:97:71:4A:DC:37:2E:1F:AC:F2:F1:46:A1:F8:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CB7FE7B28CDA3BF51C82D8E03CFC7C245BA468D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b7:fe:7b:28:cd:a3:bf:51:c8:2d:8e:03:cf:c7:c2:45:ba:46:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6c1aa90d281509951f5ee09b82ee1d63f88ee0f0691acac3c9a82151cfa3005a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:9b:d6:0b:fc:49:d1:e1:a2:17:a3:38:28:
22:c0:2e:ad:21:1e:3c:48:29:a8:7d:7d:59:4f:1b:
92:82:8e:3b:8d:ff:3c:24:98:cc:df:6b:4a:8e:88:
eb:9e:94:a4:23:3b:b3:69:cf:22:e7:b3:38:b5:77:
1e:e3:3c:66:e7:8a:66:e0:af:fd:70:c8:a7:01:07:
d6:68:b2:7d:96:85:86:19:09:7c:f6:df:8d:e1:5b:
40:34:ca:59:59:be:b6:f5:04:be:07:7e:c4:1a:28:
30:81:d9:aa:08:27:cd:af:44:42:1b:f1:5f:39:0e:
56:38:74:5b:96:d3:ef:3f:50:a7:aa:16:37:8d:c5:
92:e6:8d:fb:c0:9a:5e:61:b8:d7:ab:a8:79:17:fb:
17:d5:a9:68:61:e7:1e:c0:a8:2d:e2:3e:c0:84:8b:
1e:f6:85:96:b6:fc:cd:f0:d3:8c:d6:bc:a2:6e:44:
70:d8:5e:79:d8:0c:0f:7a:0d:1b:14:9d:7b:3a:36:
e1:6e:5d:a9:2c:53:28:0f:9b:00:15:cb:ef:cc:b5:
5a:19:d8:54:87:ff:52:aa:6e:54:62:c0:5b:3e:09:
23:f4:65:39:28:71:93:5d:99:cd:0b:d5:1f:e8:27:
2e:22:a1:88:5d:7f:9b:65:dd:c3:5f:d4:4b:97:13:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:8A:DA:88:E4:97:71:4A:DC:37:2E:1F:AC:F2:F1:46:A1:F8:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:61:42:d5:cc:c3:bd:77:62:05:11:3a:c0:ba:de:42:28:79:
83:37:9d:ae:38:de:4a:f9:bf:75:0c:42:d6:85:e6:5d:d1:fc:
79:f2:b3:f1:c9:ae:8b:10:51:48:6d:7a:23:24:5d:7a:ec:23:
91:de:bb:9b:d5:6d:d0:c0:db:20:ff:eb:5c:19:19:89:1e:c3:
d2:1f:04:6d:b3:6d:66:e0:bc:9b:1c:44:0e:10:7c:3c:31:a2:
a8:7b:e7:05:6d:de:b4:51:80:79:89:21:e8:08:62:12:31:ee:
91:4a:5e:87:85:b7:e8:8c:dd:cb:82:8b:8c:3d:f3:c6:5f:61:
ec:3a:27:8f:9a:c6:aa:e8:8c:ec:cc:f0:49:08:47:0e:29:ce:
c1:06:5e:23:74:12:90:60:19:a3:96:bb:a4:4e:9c:ba:3b:55:
fd:a3:ff:ad:d4:5f:8c:b8:e9:33:b5:7e:8a:98:06:a1:2b:c9:
03:84:1b:5c:ff:aa:3e:fd:3c:65:12:60:6c:eb:c3:d8:78:e1:
7c:77:9b:e9:21:bf:4d:3d:e3:7c:2d:f3:e5:cb:71:2f:c0:89:
3b:45:64:35:41:1d:8f:ea:21:ea:fe:55:52:e5:8d:35:33:e1:
37:e5:1e:ff:29:20:25:a4:58:7f:c7:42:4d:8f:45:fa:a6:b1:
d0:4b:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:49 2025 by rpki-client