Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e584cad3-b485-48b5-a920-636e55268d8b.roa
File: e584cad3-b485-48b5-a920-636e55268d8b.roa (raw, json)
Hash identifier: iWknTwgLabGrj/qGLcdxRgrAK3tLnpycEnwnOiH+1hw=
Subject key identifier: F9:42:34:7D:94:6B:EB:B6:78:0D:69:BC:C0:93:C3:21:EC:C9:67:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54DB2A6F2A0CB41D03F65C30278B4485C7C03A45
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e584cad3-b485-48b5-a920-636e55268d8b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:20c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:db:2a:6f:2a:0c:b4:1d:03:f6:5c:30:27:8b:44:85:c7:c0:3a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5c6114727dc2829b9498dde1ff6b18191b7307cf68b9de0f7cf178b56b11d480, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:21:2f:93:64:8b:6c:51:45:b5:11:95:3f:
e3:fa:6c:0e:f9:18:b1:2a:2a:d2:a1:e1:9d:96:b9:
7d:29:06:eb:19:0d:6d:e0:92:c7:b3:61:60:6f:7f:
e5:ca:fa:4c:72:84:dc:1a:23:70:5b:12:bc:5e:63:
1c:ec:6f:fc:6b:2f:33:88:0f:6b:41:2a:d2:d5:69:
51:16:69:5c:20:66:82:24:36:be:e1:ca:6e:cc:65:
11:34:1a:73:84:cc:88:5c:66:12:0e:05:c2:88:13:
99:4c:76:6e:9c:cc:f2:f8:7f:12:ab:cb:b5:f9:e6:
ce:3c:3b:ca:64:73:76:54:17:54:be:6d:c4:38:08:
78:c5:56:be:a2:27:6e:2c:b5:fb:53:0c:d3:9b:b5:
13:78:bc:89:ab:9f:06:5e:59:aa:8b:93:5a:87:11:
97:38:a2:13:73:a7:81:9d:3d:3d:02:cf:dd:bf:55:
d8:eb:99:06:f0:8a:38:4e:a6:26:c3:d1:0a:b5:65:
f9:03:03:1a:b6:2b:7b:4a:b3:d9:69:ce:7c:d2:c9:
fe:31:c1:ce:d7:65:8f:65:ce:bf:37:f4:a9:f2:2b:
aa:1f:1b:71:51:90:2d:b5:d8:c8:00:d9:35:04:9c:
bd:0b:33:ff:50:dd:3c:7f:df:5d:85:f7:f5:3f:a5:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:34:7D:94:6B:EB:B6:78:0D:69:BC:C0:93:C3:21:EC:C9:67:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e584cad3-b485-48b5-a920-636e55268d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:6e:fd:3c:32:c7:71:a6:a1:cf:f1:0f:d4:4d:51:a3:61:bc:
e0:db:00:6b:9a:20:fc:fc:65:73:a1:aa:94:f9:bb:b1:a0:1c:
87:07:9a:b0:6e:e2:f7:e9:3b:0f:e1:ea:4a:be:c4:cf:d2:54:
71:c7:93:fa:7f:fb:c7:10:03:e2:bd:61:cb:dd:b4:03:40:66:
71:ab:a1:c9:8a:03:86:20:e0:b8:e3:dd:b2:cf:77:c1:da:c3:
61:c2:f5:74:9d:bf:77:4f:ac:4a:eb:a4:51:fc:8c:50:c4:9b:
73:63:a4:e0:af:a8:fe:78:50:92:60:ff:e6:bf:c1:65:ce:ca:
9e:5b:4b:60:b8:f1:73:7f:32:0b:e5:61:51:c7:de:63:bc:53:
bb:2b:c8:8b:2b:a9:76:f2:23:98:cf:2e:f8:27:b4:66:ec:d2:
56:fa:82:08:09:8a:3e:16:0d:84:c4:fd:ad:34:fa:31:60:0b:
8b:19:8c:97:63:fc:84:8a:3e:26:08:50:4d:dd:b5:a7:1a:dd:
32:d4:15:e2:72:73:20:87:29:12:07:df:36:ad:f6:df:a8:11:
a0:dc:69:05:53:d2:c9:e7:f9:17:c8:42:bf:37:7c:31:c4:d7:
08:8a:a6:4b:08:c8:48:32:03:e8:09:9e:14:07:43:44:75:d4:
ec:da:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:43 2025 by rpki-client