Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa
File: f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa (raw, json)
Hash identifier: WRwH9q4D8uuNFCj4stnLeEkcEIa7xLU0EwNtDE14gJk=
Subject key identifier: 46:52:60:98:D1:65:97:DB:99:AE:F3:86:C0:9A:71:BF:B6:04:6C:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C556A41C1A6C66AF6A10A779B4668E7D935DF11
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:55:6a:41:c1:a6:c6:6a:f6:a1:0a:77:9b:46:68:e7:d9:35:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=65ac119fd88c64e80b2111cf1a4fffbb6b7e32978d28b1b0cbeb17bab4a999e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:ce:19:4f:df:61:1d:48:42:e1:4a:f2:2e:
a4:63:83:ff:06:ad:dc:03:a2:a8:53:31:1e:c2:df:
4b:b3:ac:23:62:21:23:da:ff:36:44:c1:ff:61:13:
40:8f:48:62:0c:76:63:94:19:82:b1:68:6c:de:7c:
77:e8:1a:d5:e5:69:61:d7:41:38:c7:c6:8b:86:ac:
f0:49:e9:c2:d2:72:67:8e:4f:e6:07:8c:ea:0c:40:
68:d1:72:87:be:c7:58:a4:a1:e8:02:b7:13:9f:6a:
e9:5c:24:cb:5d:fa:02:9b:db:eb:b7:8f:e5:63:86:
b7:4e:50:37:37:53:cf:f8:15:f4:fb:21:05:98:0c:
33:27:c6:ce:6e:f3:25:93:22:aa:ce:12:0b:34:fc:
e1:a5:29:ef:ff:83:8d:7d:29:f9:47:27:3a:66:77:
a4:85:f7:40:dc:27:04:95:f0:7b:e1:1c:3a:c0:71:
48:96:a3:f3:42:e1:ba:b8:18:76:b3:c3:1d:61:1d:
73:2c:b2:c0:50:dd:02:a6:2f:1a:d9:81:85:f2:c6:
1d:d9:18:40:0c:3f:3e:95:c3:6d:bb:f5:04:87:65:
c4:b1:86:aa:d6:26:20:c5:24:fd:a9:0c:3e:ad:f8:
ea:8b:5c:78:78:ec:8c:8c:f1:ab:5e:9a:a4:4f:a1:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:60:98:D1:65:97:DB:99:AE:F3:86:C0:9A:71:BF:B6:04:6C:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1000::/40
Signature Algorithm: sha256WithRSAEncryption
8f:c9:1c:ec:ce:c0:5e:53:8f:09:cf:6b:11:d8:dc:e6:02:da:
f7:d6:0d:5a:d4:85:76:f9:4e:16:69:10:59:06:43:ad:67:9e:
e6:54:f3:ac:f8:80:09:0a:16:13:18:62:fe:e8:54:e1:73:72:
d1:32:f7:fc:1d:81:59:9c:e9:34:9b:78:1c:9f:54:21:af:06:
2c:ba:71:56:65:d2:4b:0c:1d:3b:fa:2b:f1:30:e8:d5:4c:56:
9e:a6:c8:c4:72:da:e1:a6:59:fc:19:aa:bd:02:f4:0c:b1:d1:
78:d1:af:61:2c:1f:a5:01:8e:9c:5d:9a:da:0d:2a:da:66:5b:
8a:62:f8:f2:38:75:58:13:60:c3:2d:09:ab:9a:ab:62:ed:b6:
5f:44:23:6f:01:a5:f7:14:e9:2d:d4:df:4f:56:0f:3f:a2:5c:
8f:9a:9b:c1:f6:d2:aa:fd:dd:11:47:47:f6:75:86:b2:1a:37:
09:e1:01:23:9f:18:fd:1b:c1:62:26:a8:ea:31:8f:38:24:3f:
fe:5a:f9:26:67:3e:31:9c:31:d6:8e:e1:cb:d4:9a:45:87:17:
f9:7b:a8:f5:5f:2b:d0:e2:40:3a:30:0f:83:9f:27:10:9c:da:
8e:cd:22:f3:c5:50:c3:72:75:97:28:a1:6f:cd:bf:51:bc:93:
a6:e5:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:42 2025 by rpki-client