Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
File: ea31a166-ce12-4108-9868-894ac9df0e65.roa (raw, json)
Hash identifier: gVhSltOR2OEUObfUXrnsMbghF74Yr2dLf+fLg4mfQ4M=
Subject key identifier: 7C:98:01:39:44:66:ED:6C:EB:73:75:68:31:11:12:58:95:30:3C:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 435BC258B48CFCE34BFD0C26B60E34CE42B5781F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5b:c2:58:b4:8c:fc:e3:4b:fd:0c:26:b6:0e:34:ce:42:b5:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f1c99bc69ab1558a7455d71589ca9d3df475cf696a9fa5867b23de68ee20c0e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:f1:54:70:f9:50:50:8c:48:9e:e0:a8:ac:
c9:1d:52:72:b8:d4:61:4f:a2:aa:a7:1c:16:bb:78:
df:db:46:7d:cd:5a:c2:d4:a2:04:15:54:b7:fa:77:
d1:bc:12:41:b6:08:1f:09:02:8a:ea:11:09:7d:2f:
77:32:9f:c7:5c:c6:7e:c5:15:ea:31:4e:ea:03:64:
a3:51:dd:8e:a0:d0:1f:ec:6d:f1:86:70:f8:b7:25:
40:e6:95:2e:be:e4:6d:a0:5f:b3:24:07:b1:c6:18:
61:3c:d3:94:57:83:28:ba:fb:22:48:68:41:e2:b9:
81:24:20:5f:7c:bd:ae:f1:b9:8e:eb:a8:64:ce:22:
a7:24:99:c9:d3:0d:f5:3a:67:cc:6e:ca:c8:3d:6f:
6a:d3:05:67:0f:7c:7f:e9:2b:ff:ca:e4:c7:13:1d:
59:3b:6d:0d:36:29:42:3c:d0:1b:d6:70:99:16:57:
d8:9f:74:63:73:02:40:5e:58:ae:fe:d6:01:57:d0:
de:fb:d7:ed:2a:73:72:f6:d4:d5:85:a6:ad:23:6c:
39:9d:b0:90:38:c0:e7:06:0a:84:a9:b1:6a:1e:6f:
12:72:31:a4:05:ce:12:61:0a:eb:ac:d7:f8:95:c5:
cb:d2:f4:fc:8c:fc:fe:78:5d:e8:52:38:e4:2e:9d:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:01:39:44:66:ED:6C:EB:73:75:68:31:11:12:58:95:30:3C:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b080::/48
Signature Algorithm: sha256WithRSAEncryption
1e:bb:24:58:86:39:3b:ea:2b:46:1d:3a:74:2a:83:c9:11:09:
f5:78:b4:b2:f6:15:a9:4a:09:56:a6:a7:de:ac:7b:c8:27:ce:
b8:0d:75:f1:64:b1:14:cb:f7:86:58:dc:fc:b0:c7:29:38:b3:
44:10:22:0b:71:2a:fc:ac:f5:28:70:ac:44:ba:56:3a:83:0c:
ad:be:11:59:13:b5:c2:d6:54:30:f4:80:f1:fc:96:77:fa:68:
e3:60:ee:17:ed:1d:dd:ee:62:00:66:80:42:32:91:a6:8d:fe:
74:a8:a5:de:53:c3:5e:10:06:6f:6c:26:de:63:6b:5c:62:94:
c1:9d:fa:a4:d1:a7:29:b6:8f:6d:68:39:b8:40:13:c7:db:40:
1b:d3:01:3d:52:ff:42:16:d7:5a:cd:42:7a:41:81:a7:7d:a9:
3c:63:99:ae:92:df:e9:b6:e9:65:fd:bc:47:55:d9:66:e4:4c:
93:59:2f:5c:57:00:93:0d:3e:5b:7b:6d:64:d5:15:50:db:ad:
8f:09:43:cc:3a:65:b6:8c:62:64:f3:ca:c2:37:9d:fb:47:c3:
7c:ee:2c:d7:36:da:f3:7b:f1:ab:a2:9b:30:04:85:9f:2d:3c:
63:96:16:c1:ea:88:79:a3:10:8d:c7:47:64:aa:64:3e:fc:e2:
2a:e2:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:32 2025 by rpki-client