Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
File: ed0f44c7-c286-45c9-9156-5644f580ab41.roa (raw, json)
Hash identifier: /wyN1Gu8GoXPv51zWUCCHbfaQkFM6U1eSOtfMV54HIg=
Subject key identifier: AE:3A:27:CA:4C:DD:93:C0:63:63:25:B7:4F:90:A7:E9:DD:E8:6F:EE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AA57FCE1E6715DEF5C41B68237040F69A200D59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a5:7f:ce:1e:67:15:de:f5:c4:1b:68:23:70:40:f6:9a:20:0d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5199eae7aab4c51801a40ff447b0bf8f28007e5256d437ffd1735d6543bccb38, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:70:6e:54:38:a2:74:e5:d7:05:29:2d:b4:
44:4b:ed:42:ee:91:d4:68:22:9b:52:e2:b4:4e:69:
20:66:f2:75:e9:b6:1e:1a:bc:c1:63:29:ea:ae:cf:
94:1f:96:56:35:90:c4:69:61:02:0c:36:80:fe:63:
b2:d2:66:97:79:ac:86:eb:83:0d:16:a6:c8:9f:5b:
d4:c0:0c:65:44:67:8c:b4:2b:32:48:60:42:f7:ad:
da:92:54:66:08:5d:17:26:29:d6:8f:72:e3:8c:2a:
ce:c3:29:e6:e0:40:bc:12:28:81:1e:0b:b9:11:25:
45:a8:aa:21:0e:cb:df:aa:61:36:cb:31:5e:f8:7a:
73:14:9e:93:d7:3a:ec:6e:4c:8f:fe:38:3a:ad:27:
38:e4:cf:90:12:da:4c:58:cf:ce:c6:28:64:0a:87:
ca:c9:83:36:fd:9a:96:49:d6:dd:ec:ef:61:5a:29:
b9:dc:99:d8:72:cd:1f:cd:22:6f:a3:fa:98:76:3f:
11:aa:a3:eb:fc:e3:8f:8c:bd:c4:ba:06:67:00:f3:
b1:d8:ef:1c:1b:29:0f:04:46:89:5d:03:ad:f0:8d:
46:5d:ae:79:88:fe:8f:85:b1:cb:f7:1f:93:d1:ad:
ea:66:bc:23:f2:fc:04:72:8c:3b:46:c9:17:9e:24:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:27:CA:4C:DD:93:C0:63:63:25:B7:4F:90:A7:E9:DD:E8:6F:EE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:b000::/40
Signature Algorithm: sha256WithRSAEncryption
6c:37:38:46:5a:ed:d1:d0:a1:84:fe:49:50:6f:24:8b:62:e0:
8d:cb:5a:2d:0f:a6:83:d3:94:95:23:9c:a3:58:2c:eb:b5:8b:
a9:6c:3a:13:9f:9d:54:3b:7e:11:fc:df:a3:5c:62:92:76:5a:
53:fb:30:f6:e8:f9:74:02:6e:1f:0d:90:17:d2:8c:5e:2a:9d:
9d:a0:f9:fa:ca:49:d6:8b:78:bd:89:d9:31:af:3d:a7:1d:98:
72:01:0c:cc:25:71:89:39:14:18:c6:e8:84:56:dc:3a:bc:1e:
7a:d4:a8:b5:59:30:09:b1:2e:6d:94:71:10:3a:72:84:dc:25:
3b:4b:b1:ac:5c:e6:70:4d:74:7e:5b:cb:1f:2c:6f:bb:b3:ed:
43:bc:14:fe:7b:2f:e3:6e:18:ac:54:23:04:a9:f2:f8:b0:66:
80:e5:04:ba:86:e8:bb:cf:63:73:ba:ce:ca:f9:e5:8d:45:8a:
84:60:9f:34:57:ac:cc:d1:4c:25:cc:fe:ab:b1:35:b6:f3:23:
78:58:33:c5:48:e2:3d:c2:dc:c2:ed:91:8e:81:0d:86:ff:0e:
70:b0:1f:d7:30:84:8d:33:f7:bf:8d:57:b8:55:f4:7c:81:46:
c8:8b:e3:c5:28:92:3c:36:e1:3d:4b:40:a4:68:e4:3d:ca:03:
b8:d0:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:01:58 2025 by rpki-client