Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
File: e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa (raw, json)
Hash identifier: vBkg63hB1sYsd2A71S/UaR9nn1tY2CE3W3BrJ86YUYQ=
Subject key identifier: 40:08:8C:0E:5D:75:B7:F3:64:09:34:F5:B3:4C:B8:EC:D2:3A:14:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13CEFB3CABC6A281B64E5A86142CAFC858B5568E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ce:fb:3c:ab:c6:a2:81:b6:4e:5a:86:14:2c:af:c8:58:b5:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=95afcf7bb4fc519b7c94ce70f79c82bb6b7d6e09b3b0074be1bdc632d8ae8135, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:6d:a5:4c:6b:2d:f5:a3:e4:94:1b:7f:23:
5d:31:7c:00:80:cc:7f:7d:b3:f4:2c:cd:04:56:b4:
7e:54:99:8f:60:99:c0:5b:af:3a:4b:63:d9:0c:57:
db:eb:46:38:39:cb:6d:21:f6:91:7b:c5:60:a1:d7:
b8:f8:14:ba:88:2f:35:fb:ca:64:48:ce:0e:25:40:
f7:a0:38:9d:55:03:b0:b8:b2:72:48:f6:16:ba:35:
ac:d9:59:a5:6b:f6:ae:3a:f7:0a:d2:12:2c:8b:35:
30:25:8d:44:7a:10:cb:a4:01:a8:51:0a:e8:ee:9f:
64:a9:0d:6c:41:a2:b3:ed:f6:86:d3:2a:73:75:9b:
08:b5:f4:3b:0c:f1:49:33:9b:12:6b:02:cb:60:e6:
68:b2:67:91:fb:1c:5a:c7:8b:5e:73:b7:69:05:34:
2b:33:6c:1b:45:78:fd:d2:b9:bc:99:f1:a3:45:8d:
5f:92:be:b4:24:48:a0:90:fc:a0:6c:99:b2:10:09:
cb:b5:08:9f:4e:42:71:8b:ab:16:45:d6:4f:68:e4:
9f:f9:70:fb:fd:fd:26:7b:1c:fb:3b:53:3c:b7:cd:
b5:7e:cb:fe:6d:9b:9c:5c:3a:04:c9:90:87:22:14:
11:a8:07:24:5f:91:61:d3:1e:f3:9a:47:44:a2:74:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:8C:0E:5D:75:B7:F3:64:09:34:F5:B3:4C:B8:EC:D2:3A:14:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:c000::/40
Signature Algorithm: sha256WithRSAEncryption
63:a7:65:17:ad:91:7e:ff:3e:61:59:ee:ff:b8:45:68:d7:56:
e1:41:9a:d6:dd:63:bb:87:3f:55:2d:47:c9:63:6a:56:ef:00:
a1:14:e0:b4:80:ef:79:a8:cb:67:cb:1a:87:04:b4:0d:87:ff:
9f:94:83:7c:21:16:72:70:c7:60:bb:92:86:7a:23:7f:1c:5d:
26:d1:0f:ea:00:8f:a8:5b:bb:36:f8:97:80:86:cd:99:ad:1c:
bf:c4:6d:22:0f:78:f4:a8:53:6a:bd:4a:9b:b7:50:88:8c:3b:
bb:91:2b:ae:4d:95:96:14:ac:07:1e:6f:b9:2f:d1:a6:67:3b:
11:47:f3:0f:f8:5c:2d:eb:a4:40:a5:de:0e:20:38:08:80:31:
b8:07:9a:f0:2c:55:b3:06:8a:2f:82:19:ba:e3:61:72:64:5d:
99:ab:ae:e5:c7:b7:4f:c6:21:9b:72:47:87:65:23:f0:a6:30:
d4:1e:3e:77:25:59:55:39:d9:20:89:ee:84:16:89:9b:11:2d:
5f:25:a7:47:18:ac:17:47:d0:71:d1:5e:7d:32:09:f4:d0:da:
5f:1d:aa:50:c7:fb:8b:b6:35:30:f1:af:13:56:e9:87:bc:12:
ec:7a:dd:52:71:f4:c3:a0:4e:2b:0f:8a:a4:61:d8:c2:9b:7a:
e6:15:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:07 2025 by rpki-client