Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ead335a6-c944-4428-8125-039e74da6674.roa
File: ead335a6-c944-4428-8125-039e74da6674.roa (raw, json)
Hash identifier: 0BEZ/Fuz0ZLOkfj1+aZd4xzjHxDCp9gK6bKLVQnrX3w=
Subject key identifier: 33:AB:9B:92:08:73:79:95:41:0E:52:3A:28:6E:02:8B:9D:F1:A8:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70A46374AED628A05D3ACD06482B973EFB2D8FD5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ead335a6-c944-4428-8125-039e74da6674.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a4:63:74:ae:d6:28:a0:5d:3a:cd:06:48:2b:97:3e:fb:2d:8f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=af7697d5cd89344daf9b28582c122395f7214ccf01bae4fa94a267faebf481ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:7c:13:7e:8c:12:d7:5d:da:44:4c:ed:dd:
6d:24:9f:05:4f:4c:0e:4d:38:36:b8:50:45:ae:24:
a7:c1:f5:b7:cf:31:ef:6e:34:12:5e:89:c4:0b:c5:
4e:fd:8b:56:95:cc:ca:b7:0e:60:c0:41:70:61:87:
83:b8:87:de:63:43:04:9f:cb:52:c7:d6:f8:d4:d7:
9d:d6:a8:92:53:c3:86:c0:01:50:95:a9:ce:30:ee:
cd:18:b1:f4:34:f1:4d:80:05:cc:f0:13:7b:b7:a6:
63:f6:2f:39:73:66:6f:d6:34:46:51:47:7f:be:8f:
9d:3f:3d:12:47:fc:6c:a0:0e:54:c1:b1:c2:64:bb:
e8:e6:10:3f:6a:c5:4e:d5:ca:b7:04:ca:f2:e1:bd:
05:32:71:c3:85:1c:76:c6:08:91:3e:be:42:d9:a5:
ba:d5:a6:b1:9a:cf:76:83:44:c0:82:cc:f7:36:09:
7b:ec:9c:4f:67:2a:37:db:69:29:9b:c7:aa:22:b4:
6a:75:fd:b4:67:9a:4c:f9:9a:b9:60:f1:a5:6f:c2:
1e:d1:6f:a2:b3:08:c6:68:99:3b:f3:bc:60:cf:45:
76:07:87:0b:b3:b3:70:62:bb:fe:c8:da:8f:42:90:
9d:b1:8b:8d:56:c2:52:4b:1a:72:fe:6a:c7:75:2c:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:9B:92:08:73:79:95:41:0E:52:3A:28:6E:02:8B:9D:F1:A8:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ead335a6-c944-4428-8125-039e74da6674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2000::/40
Signature Algorithm: sha256WithRSAEncryption
66:a5:74:87:bc:1e:d5:6a:c3:68:4f:86:2f:c7:45:c3:a1:b6:
96:57:26:25:7e:11:9e:c8:e0:b9:0a:27:50:c3:50:1b:8f:f7:
62:3d:0b:64:96:85:b5:c0:52:ca:ea:de:bf:29:8d:f3:86:40:
d3:92:7c:ff:66:1d:63:5d:b4:0e:43:1d:a8:48:a7:f6:b3:c7:
c4:7f:25:94:05:fe:11:b0:d4:a8:f0:e1:a9:61:49:7f:49:f3:
27:0d:e1:91:80:c9:46:a5:f9:eb:1e:69:58:7b:f3:52:96:1e:
c6:20:18:38:0a:0a:11:ea:33:cd:77:72:52:ff:dd:fe:e3:21:
b9:5c:91:8e:f0:cc:b3:cb:8f:9d:10:24:f2:b9:2f:7e:6b:4c:
2f:5b:21:85:a4:b0:66:58:75:0d:a1:34:57:65:e5:c4:60:4e:
6f:2b:3c:92:25:05:96:e2:fb:cc:00:cd:00:f3:13:15:54:24:
15:8c:bb:cd:69:ff:62:82:2f:80:7d:44:e5:59:b9:96:bf:ee:
e7:ee:ca:b0:b3:b0:7f:49:87:97:29:48:8a:20:17:09:bd:bc:
16:29:58:0c:03:10:32:cb:35:db:41:33:55:d5:72:25:05:d4:
7e:07:97:e5:ba:b4:1e:86:25:82:69:f5:67:c6:fe:07:5b:09:
0b:d8:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:18:18 2025 by rpki-client