Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb69b216-60d5-4f56-b2b8-3401f331f31e.roa
File: eb69b216-60d5-4f56-b2b8-3401f331f31e.roa (raw, json)
Hash identifier: Cm81Bt5TucKgM2wUhn4PXPlR50X17TSYt5ODhLvY9s0=
Subject key identifier: 93:C7:AD:A7:9E:7B:61:B8:5D:79:5E:5C:B7:1D:40:3F:5E:6C:71:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1813FA56E867E3B9119591A3581D3CED39BA9409
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb69b216-60d5-4f56-b2b8-3401f331f31e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:13:fa:56:e8:67:e3:b9:11:95:91:a3:58:1d:3c:ed:39:ba:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=899514039ddbb05fec547a2d97211075a8e7e5819e766cab50774e00d7e53b57, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:d5:94:a3:31:ed:16:c9:5c:c2:f5:bc:a6:
05:7e:68:55:86:e0:30:6a:a6:31:85:76:ff:ef:9b:
81:10:ae:bb:fc:fe:95:ed:39:2a:10:83:d0:bb:52:
96:3f:bf:0e:07:ef:c0:4b:c5:2f:18:1a:b0:96:40:
2b:7a:59:0f:4e:39:81:7f:34:37:91:be:95:e9:fc:
c7:34:6c:50:07:95:bc:bf:f1:50:19:60:ff:65:0e:
33:2f:c9:95:e0:75:5e:0c:db:f1:fd:20:e3:b6:e1:
20:14:de:a5:8c:84:0b:e8:ce:aa:2a:1c:f7:e5:6d:
6b:86:ee:2d:4b:20:6e:16:44:96:92:3b:c5:1a:2b:
c9:88:06:ed:7a:e3:8d:49:c2:2e:2a:57:39:39:68:
1f:4f:ba:4d:5e:f6:df:d5:a4:a5:c6:18:b0:3a:24:
e8:f5:94:38:0f:63:d1:86:ec:8b:91:62:59:61:c8:
4b:a4:5b:38:8b:3d:28:96:33:a4:1f:cc:eb:ab:45:
70:26:20:c6:d7:8b:1e:38:bb:32:da:ea:88:f4:7e:
0d:ee:f4:31:75:f1:b4:05:f9:f7:ba:92:2a:12:63:
b9:59:48:f7:9b:19:af:78:61:09:86:21:18:d0:08:
30:60:5a:3c:e4:9e:1b:46:c5:41:b1:dc:9b:bc:14:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C7:AD:A7:9E:7B:61:B8:5D:79:5E:5C:B7:1D:40:3F:5E:6C:71:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb69b216-60d5-4f56-b2b8-3401f331f31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
11:f3:dd:ff:27:c9:11:2f:cc:ff:eb:f0:56:30:b9:4a:ed:00:
90:9c:1e:1e:33:ae:57:ba:69:03:29:7a:2f:1c:28:36:51:b1:
b6:8e:29:63:02:b8:cb:15:1f:49:b6:93:0b:85:f3:c7:d0:a8:
8a:b6:1a:c8:1b:39:2d:eb:75:ec:e9:d5:f7:ee:f7:6d:e6:cb:
9f:83:dc:b1:f3:18:ce:e7:a5:32:9e:c9:d5:12:ef:d1:39:4b:
55:42:40:01:c4:be:e6:fe:41:54:a5:f0:47:c6:b5:a2:54:81:
60:71:1b:b7:c1:8c:bb:6a:f8:ab:83:5e:0f:42:4e:e7:6d:31:
dc:5d:98:b4:3b:b2:99:4d:20:de:9a:b1:a0:9d:4c:70:e6:71:
83:ed:c4:4e:e2:7c:43:04:5f:0b:1a:18:5f:02:03:a7:46:e6:
5d:2c:89:ac:76:cb:3f:3a:33:3f:b3:95:7d:83:f6:ff:a4:30:
48:c8:48:9b:a3:ca:73:70:9c:9c:3d:86:80:49:57:27:f8:0b:
7c:64:5f:c8:8f:1d:8b:75:68:08:d4:ed:5c:d1:83:d8:b4:c7:
96:45:b2:e7:dd:3c:30:e3:e7:7f:91:32:ac:3d:42:64:0a:4d:
b1:b9:9c:10:e7:82:81:8e:f0:f5:59:e2:cf:c6:41:cc:4e:c7:
fb:21:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:40 2025 by rpki-client