Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
File: e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa (raw, json)
Hash identifier: 3t43FWx/JtbyqY7LA6xQwH/Ncrd+2TV93AIundUPqJE=
Subject key identifier: A5:BD:55:0B:61:46:62:02:33:DC:7E:56:7F:11:CA:3F:96:5D:D8:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34F7DEFE6CF2A40FAB10639E2D30734302FA60B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
Signing time: Thu 30 Jan 2025 00:00:00 +0000
ROA not before: Thu 30 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:6000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f7:de:fe:6c:f2:a4:0f:ab:10:63:9e:2d:30:73:43:02:fa:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 30 00:00:00 2025 GMT
Not After : Mar 6 23:59:59 2025 GMT
Subject: serialNumber=ce28a773ee7b80efc8f67c3f9b8fff90f82499428613b3c4148518d3100f7a06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:23:90:99:dc:c7:d2:61:48:e6:95:9b:36:
67:60:7d:1d:60:e2:a7:84:83:07:62:ae:28:8d:c3:
d9:e9:1f:83:1a:5e:8c:cf:b7:f3:73:e6:49:fb:8d:
60:23:5d:52:46:92:a1:10:4c:b4:ba:4e:2a:77:06:
01:bb:30:73:85:b4:3d:5e:3b:43:bf:a7:ec:d5:79:
0f:24:5a:ec:b0:22:bf:be:09:a4:5f:b9:6a:55:dc:
c0:03:a1:3a:dd:03:77:fa:9f:c8:f2:f4:e2:3b:77:
a3:74:b3:5f:0e:f6:e3:8d:30:1e:6b:57:fa:b9:2c:
8c:ed:31:5e:fa:3d:fc:08:61:d9:2e:3b:57:ed:c8:
63:44:f0:c3:5c:1c:81:e8:14:0e:31:02:c5:a9:44:
e6:2f:19:4d:09:ba:ab:10:e0:77:be:aa:9f:4c:31:
91:3e:4a:1e:d6:94:12:47:c8:e8:89:ff:6e:8b:ec:
5f:4a:b5:28:a8:c6:5b:55:8a:2b:3b:d2:21:d2:a6:
73:62:1f:66:61:e6:99:16:f2:0a:f0:b0:e4:4f:b3:
32:87:ae:3c:dc:59:1c:63:32:1f:9d:20:a1:75:fa:
06:98:e6:a6:8b:ba:f3:cf:ef:76:1b:62:4e:74:aa:
35:32:4b:c2:b8:cd:b3:8e:3d:02:6f:56:8e:f6:f4:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:55:0B:61:46:62:02:33:DC:7E:56:7F:11:CA:3F:96:5D:D8:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:6000::/48
Signature Algorithm: sha256WithRSAEncryption
b4:c5:d2:d4:47:b6:6b:2b:3d:d7:fc:64:27:56:71:92:c0:92:
4e:a5:ac:b8:af:3e:51:72:e0:07:75:fe:15:f7:33:96:9d:8c:
01:dc:d1:64:a3:72:fb:30:67:da:57:e0:c9:09:06:4d:35:8a:
a0:a5:78:ab:5f:3d:e0:f5:11:91:6b:12:57:ec:44:be:0d:b9:
ae:62:e5:fe:ca:a3:7d:22:18:4a:a2:91:37:86:65:e9:e2:41:
6a:59:34:ac:95:ee:09:f9:61:5e:b4:05:8c:38:9e:bd:89:84:
a5:5b:57:cd:69:b4:ef:02:a1:b0:0c:9d:58:3b:5c:a2:db:cc:
d4:7a:29:33:d8:3e:5b:e5:e2:b1:8f:79:bc:02:6c:07:cf:1e:
52:2e:5c:93:95:a3:8d:ac:b7:16:53:31:34:b8:2e:7e:54:2c:
06:30:e9:6b:ad:a8:2e:cf:04:72:8e:d1:85:7e:99:f8:c5:17:
9b:94:8d:0b:b3:4f:26:1b:1c:7c:e8:c4:11:44:8a:29:b4:20:
c3:55:a0:69:2b:28:1f:46:3e:5a:c2:b2:78:20:2a:7c:37:a9:
e8:44:7b:f8:14:59:b8:7d:95:0d:48:5a:59:75:bb:23:f9:7b:
bc:7b:31:ef:56:ab:d1:61:db:31:4d:d4:c6:71:4f:2a:d9:5b:
14:0f:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:29 2025 by rpki-client