Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4392a9b-4dbd-4966-b39c-0f1163c52611.roa
File: f4392a9b-4dbd-4966-b39c-0f1163c52611.roa (raw, json)
Hash identifier: Um5LYLxGQyfIBLRZpsYgIDWnPGApJ6zFAHPfruAk0MM=
Subject key identifier: 06:E0:AE:83:08:32:18:E6:27:BD:AF:23:BC:0C:3B:2F:5D:23:F4:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B5678B66D4F83BEDF5B29A8F70737534F2DB047
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4392a9b-4dbd-4966-b39c-0f1163c52611.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:56:78:b6:6d:4f:83:be:df:5b:29:a8:f7:07:37:53:4f:2d:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=daf0e2cba6ce880c5f98749cc1d4e998e8a3a7b502414a0de11b8501291d96ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:3e:c4:bb:27:59:8e:c7:8d:6e:6a:0f:f6:
e5:fc:41:6d:1f:28:33:18:de:2c:bc:70:bb:98:98:
54:e2:87:b9:32:d3:73:48:25:a3:fe:2d:99:93:e8:
52:f6:92:32:a2:72:e0:24:d8:c6:e1:74:5c:b2:b7:
20:81:d7:15:8c:4c:ae:99:ba:0f:c1:26:93:5a:e6:
5c:66:54:78:8d:2a:4b:e6:50:46:58:ff:41:4a:5d:
a3:79:f2:75:8a:f2:e3:db:40:9c:fc:b4:2a:f0:2f:
5f:c6:77:96:ea:36:3c:bb:77:ff:73:b1:d4:fb:86:
bf:9f:f8:d3:2a:0a:7c:5f:bc:37:df:85:f2:db:89:
3a:c5:9b:77:b9:08:a6:b9:f2:05:d7:6a:ce:9f:c1:
45:19:96:3b:21:46:62:cc:38:1a:59:ec:1e:e1:71:
f4:44:a3:7b:a6:2a:ff:94:63:7f:26:f6:b2:9e:a9:
c5:03:28:bb:4c:54:10:58:29:d4:26:71:bd:7b:f9:
53:88:83:dd:cd:63:aa:cd:1d:c6:8a:2e:d9:67:fe:
e0:89:5c:e9:f9:46:54:65:31:35:02:91:33:d1:ed:
28:03:33:d1:40:46:53:74:b8:04:31:ad:d4:9c:40:
56:83:da:44:92:1e:e2:e0:d1:0b:6a:7c:04:92:da:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:AE:83:08:32:18:E6:27:BD:AF:23:BC:0C:3B:2F:5D:23:F4:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4392a9b-4dbd-4966-b39c-0f1163c52611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a040::/46
Signature Algorithm: sha256WithRSAEncryption
1b:21:21:60:d4:2d:0a:5c:65:fa:4a:eb:38:8e:99:ff:f7:0b:
2c:20:29:fc:00:69:84:c3:10:0e:bd:0b:f8:98:4d:d9:a1:eb:
77:23:57:90:d7:69:fc:34:5c:29:93:01:ab:21:c3:4a:a4:d6:
ba:65:25:0f:79:38:2b:dc:93:47:b8:19:f7:bf:16:97:de:a4:
f3:61:71:8f:84:c2:be:2b:06:42:80:46:ab:e6:41:98:15:cf:
3b:b1:90:f5:a2:2e:4c:60:17:29:71:c9:fc:82:08:7d:d6:ee:
57:b2:9e:72:24:d4:ec:bb:f7:05:7c:13:e0:10:e2:a7:fb:8c:
d3:f1:0f:14:0d:4b:53:e9:f5:ad:0c:00:96:e4:47:bf:2e:9f:
6f:b6:35:95:b4:54:0b:5d:61:f1:31:80:d8:17:56:1e:20:93:
7a:0c:f6:14:3a:47:a4:d9:43:f2:5b:32:8f:e3:cc:5a:e0:0f:
9e:06:4f:17:91:54:bb:a9:e0:ce:44:6c:04:b4:9f:0f:f7:2d:
55:0b:76:b9:4f:04:b7:33:75:fa:d9:e8:af:77:da:af:ce:67:
fc:e8:e2:42:4e:38:95:e9:76:d8:ec:8b:64:a4:95:43:d3:03:
64:66:8f:ee:f4:d2:f9:a9:8e:2b:47:b0:e0:02:8b:1a:01:0d:
09:6b:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:22:05 2025 by rpki-client