Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e77f2ecc-83c9-48cf-99e0-a46fa060d297.roa
File: e77f2ecc-83c9-48cf-99e0-a46fa060d297.roa (raw, json)
Hash identifier: c/Ycu8ZbrpHKjHDEpxikg9/jD2yGChvyoFEXDk4ZCEo=
Subject key identifier: 5D:25:70:90:55:D5:B5:E3:D0:27:89:FE:89:B2:23:A3:60:4E:16:EE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 267B8EE560066E1A032BCE012CA43990820BACB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e77f2ecc-83c9-48cf-99e0-a46fa060d297.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7b:8e:e5:60:06:6e:1a:03:2b:ce:01:2c:a4:39:90:82:0b:ac:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a8a420a4da8993175e01fb675bd6e4d5e22998b92fb1912aa91861eeca8c8525, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:00:08:4c:2b:9b:c7:80:7f:b6:d1:32:4b:
c5:7e:0d:d5:43:8d:31:7a:bd:a5:7b:1c:ca:79:37:
f0:c0:ed:33:a7:d4:e9:14:b4:57:6f:1a:0e:8b:97:
70:ae:1d:24:3f:17:59:ce:ac:f4:1a:fc:d8:d8:85:
3a:69:66:dd:1d:0f:9d:9b:3b:f9:66:be:44:01:f2:
4b:a5:6b:37:1b:8b:60:1c:f8:45:b5:a0:3e:56:c6:
54:5c:15:77:0d:b0:38:fe:0f:5d:f1:ba:60:04:bc:
ea:42:86:71:30:7f:0d:e4:4c:15:92:6c:fc:2a:d3:
17:06:68:27:df:7a:50:ce:48:32:26:52:ad:61:80:
02:35:f7:71:6d:8e:b6:5c:70:7b:bc:fc:18:e3:c1:
21:3b:d5:87:0e:89:3f:a4:f7:93:0f:b6:b1:78:38:
9e:7a:bb:e9:3f:31:ae:2d:fb:07:f2:90:e3:4e:8b:
06:a0:99:49:57:08:ff:6d:bb:fd:38:fa:e4:59:2c:
ea:86:46:bf:b5:8a:da:58:dd:e3:4d:84:f6:8c:c3:
e3:b2:a4:92:2b:b5:f1:c1:47:00:56:ad:2d:c3:3e:
ad:af:40:f5:30:47:47:67:2f:39:0b:95:2c:f5:0f:
65:02:86:38:d5:d4:53:04:b6:08:b7:c5:ee:d7:36:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:70:90:55:D5:B5:E3:D0:27:89:FE:89:B2:23:A3:60:4E:16:EE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e77f2ecc-83c9-48cf-99e0-a46fa060d297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e080::/48
Signature Algorithm: sha256WithRSAEncryption
02:3c:4d:12:48:64:fb:a2:97:08:5f:3d:b1:3d:ba:cc:70:81:
ff:55:43:46:b6:f3:d3:ef:4a:56:ba:52:71:2d:47:29:0b:e7:
f6:d5:b2:74:56:b6:d1:55:1d:5d:b3:08:db:d9:1a:0a:ef:21:
8a:1d:f7:86:c8:92:7d:63:1a:0c:da:28:28:9b:9b:04:ec:5c:
a4:cb:f5:c6:68:9a:a8:c2:f9:97:26:d2:e0:b9:2c:13:4a:f8:
aa:16:13:33:7c:7c:47:df:9e:d5:98:c2:54:b8:de:d0:56:c2:
4c:5f:d9:23:33:77:62:e4:51:04:c2:36:1c:9f:75:5d:c4:0d:
d7:fd:47:c3:56:1d:cb:5b:18:f8:a5:9f:df:18:4a:20:24:80:
b0:02:5a:90:bd:1f:1c:43:7d:b8:b3:f2:89:b7:a6:a1:c4:56:
ba:a5:27:39:f1:b5:a4:06:e1:8c:64:8b:ba:26:99:78:33:61:
bb:34:e8:24:97:d2:f0:74:57:60:f2:d0:6d:69:3a:67:a2:63:
e1:ee:2d:7e:d0:ed:45:27:70:03:f1:84:4a:5b:41:bb:31:90:
c1:06:be:0a:c6:fc:9f:8f:44:22:d1:c3:2c:24:22:a8:28:5b:
e2:0c:14:c7:a9:a5:d3:02:d4:20:f2:5f:ad:60:d0:74:7a:6a:
67:08:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:35 2025 by rpki-client