Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
File: f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa (raw, json)
Hash identifier: Mn82CJpFfFhBVWPYoYCl8J0pZm+p5W3B2kfqx+iVH9s=
Subject key identifier: 00:29:EB:83:74:44:B1:27:A1:65:F0:4B:BC:96:F2:93:8A:BE:7D:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7626C0D16EA7F4F28C928911BA8B6EB50A9EEA2E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:80c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:26:c0:d1:6e:a7:f4:f2:8c:92:89:11:ba:8b:6e:b5:0a:9e:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6dbc7db6270d0dd3bd43d0f3507a5b7979172f8f06c3f0cbcfe4c07e9eafc1e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:21:f2:77:b7:f3:d5:e6:60:a9:15:34:b3:
ad:c1:ac:91:eb:1f:1b:a6:a4:24:8d:55:81:54:91:
0f:13:4e:e2:77:81:0a:45:d6:74:fd:37:77:36:7c:
68:b7:78:cf:8f:b3:71:cb:80:ea:e8:f8:cf:4b:e4:
dd:a2:61:90:c6:d5:11:ee:e5:72:6a:77:00:6c:98:
66:e8:9d:be:af:9e:de:9c:f8:2b:42:00:9f:44:e1:
57:0e:b6:c2:20:00:de:1b:f6:fb:8d:59:bc:1f:44:
f2:c2:92:43:0f:e1:1f:12:71:fc:27:f6:bc:33:f3:
87:60:5c:1f:84:9b:f3:f0:5c:20:36:99:49:91:cf:
7a:5a:4c:59:33:cd:d8:2b:0e:65:5c:44:ed:ba:29:
57:72:d7:79:1a:ad:4a:0a:0f:7d:8b:0d:30:da:69:
f9:dc:5f:ae:a6:f7:a4:54:6d:2d:94:00:ab:38:77:
cb:68:57:45:a7:47:9e:6e:12:09:87:9d:90:a9:17:
ec:5a:9c:75:2b:3e:1c:a9:f5:4d:e5:86:fa:19:15:
f9:4e:da:5b:a5:2f:b2:de:2a:d3:df:40:15:c5:08:
99:12:c9:a4:0d:ec:c5:92:0f:7e:0d:39:b5:21:44:
5a:b3:20:98:6d:30:92:3b:dc:fc:e1:69:47:bd:93:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:EB:83:74:44:B1:27:A1:65:F0:4B:BC:96:F2:93:8A:BE:7D:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
a0:55:aa:d2:07:73:38:3b:33:a0:f5:93:6b:01:56:10:f7:ae:
01:2f:9d:08:ad:f9:74:ee:6e:b2:4b:fe:94:5b:13:40:89:b6:
b4:43:e0:53:58:1c:4b:8b:a7:5d:49:13:7c:c2:a1:b0:9a:e6:
60:94:04:5d:4e:03:97:8e:2f:0c:3b:12:b2:ba:1f:c8:28:73:
6e:6d:1f:8d:38:77:8e:03:92:83:3c:25:16:58:b9:9c:33:45:
86:27:ab:d2:2e:dc:1f:b2:fd:41:1d:d8:72:25:2c:40:72:35:
0a:b9:6a:66:8c:f3:61:6c:e9:1a:5a:be:5a:1c:72:6d:ed:5d:
f5:3e:27:75:7c:45:de:f4:d2:eb:56:d1:34:2e:5a:9e:15:b1:
86:fa:03:26:41:74:24:6a:c3:ec:5f:4f:4f:c4:ce:23:cf:69:
95:bb:c1:84:67:71:6a:91:0f:ea:bd:c2:0d:67:5e:a8:76:0d:
dc:de:d5:1a:5b:1f:9a:c9:0b:68:40:d4:36:df:5c:f2:82:fb:
d0:c8:a2:f0:ac:0a:59:81:68:bf:0b:36:af:5e:66:e9:5a:b2:
44:87:b0:bb:55:a3:72:83:16:a1:94:06:9b:43:6e:8e:48:2d:
a5:e4:39:3c:43:8b:6e:f3:3c:de:81:19:fd:fe:9b:69:cd:b2:
d4:b1:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:42 2025 by rpki-client