Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
File: e580dca1-bc51-4f11-b7e4-287944d98510.roa (raw, json)
Hash identifier: XapDEXkRRfy5JlWwlgsF3ikLX8Yjx7MZU1aR1B95GTc=
Subject key identifier: E9:00:97:16:2D:A2:A7:78:DD:CB:F0:E7:E2:CF:4E:CC:CA:03:6D:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17080C599AC7D776FB202E48404EE492C8E61D7C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:08:0c:59:9a:c7:d7:76:fb:20:2e:48:40:4e:e4:92:c8:e6:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=04682854c532a392a8e517375916b8f821442e26babbd352257cca5fe588c3fa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:29:32:f5:60:a6:31:c3:51:fd:22:50:db:
1d:2c:82:6e:fa:4f:dd:ea:ee:81:1f:9d:59:5e:a4:
a5:ed:69:91:1d:28:be:fd:da:2b:e0:e1:9a:7b:82:
34:7e:f5:4c:6e:66:7e:3e:b6:22:08:5c:72:ca:56:
6e:ac:a8:9f:75:b2:b2:50:0b:a9:97:f5:0f:c5:d0:
db:71:2e:b5:4a:48:1a:ce:a2:88:c0:cd:ea:f4:29:
46:a9:b1:26:c1:42:10:83:b8:11:05:97:3e:32:3c:
c5:d1:2c:f6:94:f4:61:1f:f9:9b:d0:24:8f:e9:0b:
15:e6:ee:24:44:00:cd:9d:30:6a:b7:87:a2:a9:4d:
ac:fe:8d:29:74:42:b0:f7:aa:d5:6e:62:c7:be:5f:
02:25:a4:39:aa:28:a9:16:bc:be:48:d8:cf:90:63:
c6:09:12:ed:5a:37:b6:be:87:d5:d2:b6:b3:e9:41:
18:fa:dc:c4:da:bc:56:4b:df:38:41:1b:b1:9c:45:
1f:a3:8b:29:16:7f:25:b3:23:9c:0d:68:4d:ca:92:
2a:72:dd:2d:a2:c7:2d:8b:7c:f4:8b:5e:37:17:6d:
39:ba:e1:79:98:ac:a0:06:34:8e:5f:90:a5:ce:de:
f2:8c:2e:68:8f:c4:81:23:69:91:2f:ea:e0:58:60:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:97:16:2D:A2:A7:78:DD:CB:F0:E7:E2:CF:4E:CC:CA:03:6D:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:89:f6:dc:dd:de:1e:a0:78:34:25:0c:e8:2a:e4:f8:4d:52:
81:8a:ea:46:73:7c:e5:68:f1:01:04:a2:c5:2b:a1:ca:cc:76:
86:70:b9:71:86:ae:04:40:6b:28:df:5e:31:8b:ce:57:56:81:
b9:2d:d6:5a:fb:97:29:4c:ba:01:cd:ff:33:16:cf:38:d1:48:
af:2e:bb:6f:09:11:76:b8:6d:52:6a:19:a2:5d:a4:d5:34:50:
67:58:91:4f:d9:0b:c2:a1:c1:22:44:78:44:66:ed:88:d1:f2:
e2:cd:a5:a4:e7:c4:e7:11:1f:81:a9:ae:99:67:4c:a4:3a:f4:
e7:36:c1:85:b5:0e:41:be:fc:8d:6d:b4:a2:ae:21:17:d8:41:
b2:0d:ab:49:8c:cd:9c:12:b3:b2:9c:7a:01:35:57:f1:d1:38:
e1:14:e8:be:42:07:12:6f:5d:c5:fd:85:cd:62:1b:69:37:c0:
f3:3d:8b:dd:76:c4:78:96:98:e4:af:11:94:81:c0:32:96:69:
cc:61:6f:11:1c:25:ed:91:95:66:bf:e3:ea:80:0a:4b:c0:d9:
2d:78:e7:ea:48:b1:7b:9f:f8:45:d7:da:ce:68:8d:c9:cb:34:
70:4e:86:fd:69:b0:5e:80:1b:88:e6:a4:6e:48:f7:2c:48:6f:
88:aa:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:44 2025 by rpki-client