Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
File: e437969a-a36c-4417-88bd-c48ac88d9a5c.roa (raw, json)
Hash identifier: NH+lxWnxuPT1AXjKSf5AwxTFAGset2PfV+6Hf0/7CdE=
Subject key identifier: 95:3D:9A:A0:04:73:B6:52:BE:B5:E0:8F:98:F8:40:30:F3:8C:C7:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F0C5A4858272C4B38E5E251595A4B266979AB8B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:b080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0c:5a:48:58:27:2c:4b:38:e5:e2:51:59:5a:4b:26:69:79:ab:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=eda71c82b2cba80153271a068e3175f7a63881f6cef4c6cf0dbe89b3da439b87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:0f:01:17:ad:47:eb:ad:d9:b3:a3:f4:e9:
21:ce:2f:8a:7b:99:9c:7d:61:e9:74:30:d3:72:d5:
b7:ee:11:fe:bd:b2:98:72:b6:21:48:17:13:de:ed:
5a:4b:a4:ce:cc:ff:73:06:3d:91:f8:d2:f6:df:dc:
e0:2c:02:c3:7c:88:f0:d8:2f:7b:1d:f6:3c:2a:39:
28:0e:18:db:2e:cc:72:8b:8b:45:67:ba:8e:6e:a1:
6c:d0:0f:34:ad:2f:44:c3:1d:c5:db:32:c5:7b:64:
d5:28:42:2b:2b:9a:ee:a0:ac:1b:eb:27:78:e7:09:
2e:20:b6:a9:a8:a4:93:5a:9b:41:66:2d:a1:30:02:
9d:6a:f7:de:99:79:b3:ad:b5:d3:ee:84:ed:a3:1c:
e1:58:96:bc:75:92:1d:1d:79:85:54:4e:ae:be:56:
53:2b:27:31:c3:94:2d:68:7e:e1:f4:22:e3:39:1e:
45:83:af:eb:ca:67:59:07:8b:5a:68:5a:a2:eb:48:
9f:ee:12:f2:e8:c6:b9:bb:8c:f5:55:28:9c:07:0a:
e8:69:df:31:04:12:db:a2:8c:b5:3d:e8:b5:7f:59:
5c:33:2a:fb:22:fd:0e:7e:c6:79:38:e9:b1:95:e3:
92:2c:52:dc:cc:a7:4b:a2:cc:62:c5:87:54:86:fa:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:9A:A0:04:73:B6:52:BE:B5:E0:8F:98:F8:40:30:F3:8C:C7:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:b080::/48
Signature Algorithm: sha256WithRSAEncryption
a5:cf:17:fb:51:cc:1c:92:fa:98:8e:8e:16:0f:89:5f:e2:7a:
43:07:a5:9f:15:7f:5c:ec:d9:bd:5a:bd:1c:e4:2a:f6:86:0c:
d4:0a:c1:48:e8:26:5d:eb:bf:55:72:ed:c4:a9:28:ac:41:0b:
5b:06:aa:5d:8a:b3:2e:13:01:83:50:3d:70:14:d9:b9:97:4b:
d5:a3:ac:07:ef:f2:ed:04:2b:a6:65:d1:20:3a:cb:b8:5f:a8:
65:e4:35:52:3d:42:57:f6:c7:92:8b:02:bf:d6:44:4a:aa:aa:
6c:8f:89:0b:1d:82:ca:d4:99:68:73:0d:45:53:87:d5:8b:40:
cb:94:ec:9b:e2:5b:f3:62:e9:7e:97:26:41:25:73:ae:50:96:
39:62:d3:12:41:05:54:d3:2a:2b:6d:cd:19:14:2a:da:8d:63:
5a:fb:0c:31:9e:b7:81:d6:f6:7e:4e:09:3b:52:4f:ba:e6:ef:
63:13:de:3e:be:fe:2e:f3:6a:e6:9b:3b:f0:e7:b1:5b:9e:26:
aa:57:fa:79:ee:a6:63:3e:09:38:e9:14:e6:84:88:7d:58:62:
a9:99:07:f8:38:11:e4:34:da:43:e4:81:3f:1b:7d:ee:a2:68:
10:cb:d5:dc:5b:29:fd:ca:63:9a:4f:e6:0d:9b:82:8a:aa:c5:
51:24:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:45 2025 by rpki-client