Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f13f5444-377a-4e51-a1c7-10c2a3a3d6ea.roa
File: f13f5444-377a-4e51-a1c7-10c2a3a3d6ea.roa (raw, json)
Hash identifier: wEMffxyfhlbEVn9WEizYTVljbE13X+ntl50ae1aXT9s=
Subject key identifier: C6:3D:CC:55:68:B8:7E:0F:D3:B5:BB:17:29:E9:3E:75:C6:0F:D0:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F55A1B11F435403E096FAE009B5D0905AAEC78E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f13f5444-377a-4e51-a1c7-10c2a3a3d6ea.roa
Signing time: Wed 22 Jan 2025 00:00:00 +0000
ROA not before: Wed 22 Jan 2025 00:00:00 +0000
ROA not after: Wed 26 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:55:a1:b1:1f:43:54:03:e0:96:fa:e0:09:b5:d0:90:5a:ae:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 22 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2025 GMT
Subject: serialNumber=940429bff34db856ec8b02d36e84254d552f729b737db9d2f540c6d7dc868b61, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:81:1c:7b:ec:45:71:dc:25:2c:8e:e1:bf:
a7:42:bb:98:31:af:ed:74:57:e9:35:f0:1e:18:c2:
1b:d7:3f:02:14:16:e6:9e:ac:7b:2f:f3:33:bc:65:
5b:56:fd:59:f2:ba:d9:09:91:a9:48:6c:19:9a:ce:
a0:6b:47:31:40:4f:d4:23:fb:a5:4e:82:85:0e:9d:
e6:ac:b9:e1:82:52:39:49:5d:78:c1:81:8e:ee:73:
9b:45:d6:56:2e:f0:f8:73:9b:ec:aa:67:16:4b:c2:
85:bf:bf:70:06:d6:57:4c:78:50:97:f4:c7:b3:94:
cb:42:c3:5b:c9:43:ed:58:36:ad:a5:07:69:ec:41:
fc:5d:f2:59:78:89:bf:3e:86:2a:d1:a3:c7:2a:19:
79:3e:1c:f5:3a:38:d7:06:79:09:05:12:5c:3d:12:
e9:54:25:99:8c:d0:4c:16:20:8e:cb:4f:06:5c:d0:
4f:34:2f:b1:d2:0a:63:fe:66:6d:73:f0:f2:77:c1:
93:ed:b1:ca:25:18:b6:8d:c9:71:94:04:06:0f:08:
3b:7f:8f:e5:39:10:92:8f:7f:b4:43:cd:23:d9:80:
1e:12:d1:6e:ad:d0:2e:a4:de:bb:c0:43:80:84:05:
75:b0:69:aa:ec:76:1b:c2:21:5e:34:84:62:c3:cb:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:CC:55:68:B8:7E:0F:D3:B5:BB:17:29:E9:3E:75:C6:0F:D0:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f13f5444-377a-4e51-a1c7-10c2a3a3d6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040::/32
Signature Algorithm: sha256WithRSAEncryption
0b:e3:d8:c5:d7:30:63:fc:6f:3f:e3:2e:cb:78:37:5c:07:73:
5e:7f:c0:c5:5f:ab:5d:71:fd:62:ac:3e:9b:81:ea:a5:08:ab:
41:cd:fa:ab:9f:ef:3a:70:03:0d:7b:ba:bc:1b:79:aa:e2:1c:
81:7a:b2:92:63:78:9d:dd:02:8c:54:a1:b0:f3:85:37:04:9d:
7b:6f:10:92:95:96:d0:3b:cb:50:f6:cd:17:be:6a:5f:7b:b1:
62:58:cc:b6:32:62:b0:95:ec:e4:13:ea:82:80:80:ac:00:bf:
c6:d1:e0:a9:4b:82:55:d3:72:46:b5:34:49:c7:4f:07:b1:71:
b4:b1:5d:36:44:76:c9:40:f1:6e:24:01:32:6c:e5:4b:48:02:
02:ef:a0:35:26:22:a7:ba:24:4d:2e:71:42:f5:46:10:70:ab:
2d:7e:47:ef:5f:fc:94:cd:0d:61:e3:a2:7d:78:80:fe:b5:82:
20:b9:d6:d0:27:7e:39:1b:a6:93:21:ad:7b:2a:ba:b9:b6:02:
06:62:dd:0c:9d:8e:7b:fd:1a:34:ba:6e:52:2d:6d:28:a6:5f:
d7:6f:6c:fe:f7:f3:d3:5f:1d:1f:a0:54:f7:2d:17:c5:90:07:
5d:7d:29:e8:b3:dc:b5:ac:1f:05:f6:91:f6:91:48:59:b8:ea:
15:92:2a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:40 2025 by rpki-client