Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
File: e5179068-cbcf-4f9a-864d-3c97430c84f4.roa (raw, json)
Hash identifier: mGDQGQ0A43d9RNK7zzUDZGa4gjxp6+AhkVqG9YyUnFk=
Subject key identifier: 50:00:A8:42:C8:09:45:C4:63:30:29:09:0C:E6:45:E6:B2:9D:2A:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 751DD397F68285EB5E79AD789DA937D19236D907
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1d:d3:97:f6:82:85:eb:5e:79:ad:78:9d:a9:37:d1:92:36:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f785e1e388a97b798e34e5db7e9119221356905c0f478c2276e21d2fe510c9d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:e9:4d:73:9b:21:6e:24:65:5b:9f:0c:31:
51:0e:49:27:6b:bf:33:5b:1e:81:f1:a9:b5:a2:1f:
29:8a:4a:1a:51:fd:e7:4f:db:59:bd:6e:a6:88:48:
13:8c:25:96:f4:58:04:c3:66:64:3f:52:f6:11:2e:
eb:09:75:1f:b4:45:4f:42:08:56:4e:54:f4:79:87:
cc:33:8e:55:11:32:29:b5:58:4d:fc:66:27:a2:46:
d5:4d:43:c6:31:d6:9d:c5:70:ab:82:ad:43:9e:49:
ef:05:3e:b0:5c:34:d2:d5:b7:23:94:6a:b1:be:73:
c6:5d:2c:fe:5d:8a:06:2d:e0:2c:d0:2c:50:a5:ed:
bd:c4:02:75:bf:d5:1f:70:8e:8f:0d:1d:c2:99:fc:
66:db:09:43:1a:15:c0:1e:2c:7b:c9:4c:c6:52:97:
af:23:12:63:12:4f:52:a5:86:aa:ef:c8:ce:ff:6e:
1a:a6:65:f9:57:d8:4c:91:27:02:cb:91:dc:c1:da:
10:9a:4b:3a:e5:38:ef:2b:bc:50:df:e6:3c:d4:39:
36:49:bc:09:c2:dd:fe:7d:65:94:2f:94:78:ec:f0:
34:dd:f4:8f:5f:58:ff:94:d2:f4:7e:d4:f6:9e:7f:
95:2f:51:60:b3:17:ce:55:64:3a:5e:62:a5:be:4b:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:A8:42:C8:09:45:C4:63:30:29:09:0C:E6:45:E6:B2:9D:2A:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/38
Signature Algorithm: sha256WithRSAEncryption
31:5e:08:dc:68:76:8c:f2:4f:eb:36:e3:c6:c2:6f:e6:ce:cf:
cb:79:d5:74:84:48:3f:64:22:5f:44:40:e5:00:77:83:2b:22:
1e:33:f2:28:b6:40:85:af:87:a0:3e:28:30:6c:99:8e:2d:12:
08:08:7c:d7:c1:09:47:16:da:40:1e:81:9f:25:c4:4b:18:ae:
dc:cf:e6:07:dc:6e:c6:f4:3a:87:64:9c:e3:ed:29:53:73:b0:
35:91:f0:f6:de:b6:a6:53:e3:f6:da:fd:81:ac:00:ae:09:be:
7b:d8:5d:a5:76:90:f2:5b:cb:66:91:99:f8:45:cf:f0:f0:81:
01:26:23:c8:63:a2:fc:aa:40:2e:b3:98:a1:d3:a1:27:0a:22:
e4:42:28:3a:cc:dd:4c:c9:75:2a:a4:d3:04:02:38:29:21:01:
ba:17:22:64:13:3c:aa:2e:7b:e5:a6:ed:2c:4f:6d:f8:0d:cb:
a7:38:03:f7:2f:dd:cb:8e:a1:73:12:87:9c:83:26:0d:84:78:
09:84:20:2a:1f:31:e0:2f:ef:5d:34:ee:aa:89:5d:73:94:88:
74:02:ef:ef:2f:24:e5:63:3b:d2:38:47:e1:fa:b5:fa:51:5d:
49:c8:0c:b8:ea:71:ed:f3:3d:68:d9:cd:f9:3b:4b:96:2d:30:
6e:7c:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:56 2025 by rpki-client