Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa
File: f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa (raw, json)
Hash identifier: qZb0mzMVTSlm6WB5q9XLIlQoQ2vHaA/0PfUeHoSQTyo=
Subject key identifier: 6D:19:A4:0C:AF:DA:84:34:EF:F4:FF:BF:BE:CC:6A:87:DB:9C:93:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 090700EAC90409B61759FC7CE6D37E9E7101CFE5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:4040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:07:00:ea:c9:04:09:b6:17:59:fc:7c:e6:d3:7e:9e:71:01:cf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d490b8f5e5582466f7b9df04f316cd2285ec9447dd8b7cca661ee9d4db82e257, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:e3:91:0d:68:10:38:9d:7b:5c:54:28:05:
8c:cd:4f:6d:70:93:ca:6d:b9:f7:98:5a:dc:cc:f7:
41:f3:5a:c8:c5:20:2c:b5:df:ed:03:ce:f6:08:e1:
44:59:e1:1a:28:83:65:4c:89:91:d4:c7:f7:82:6d:
f9:0a:96:dd:29:a3:ee:c1:89:9c:82:d7:60:b6:4f:
7e:f1:98:b7:66:04:be:a0:87:d7:0e:1a:2c:53:1c:
fc:b2:af:a4:89:92:0c:d0:6a:9d:cc:99:8a:57:51:
26:7f:28:da:48:d4:e5:d3:0c:5c:f7:d0:ff:fb:e3:
14:c5:9a:1d:6b:d2:4b:ad:bc:45:36:92:07:78:27:
79:e5:48:1c:97:77:8f:6b:0e:dc:c7:c2:85:85:d4:
c3:15:28:30:9d:0b:fb:49:64:02:5b:e8:5a:48:26:
93:c4:a7:39:66:74:a0:a4:23:ef:f1:66:b3:29:20:
cf:b8:ba:ed:6a:fa:7c:2e:7d:74:47:91:27:68:4c:
d5:bd:f0:e9:29:22:58:17:3d:ee:a0:92:e5:fa:7f:
af:71:8c:9e:7b:24:14:a2:02:5e:d3:ff:57:82:f4:
df:13:8b:5c:e8:97:61:7c:31:3d:19:9a:2f:8b:38:
b9:d1:67:83:fc:4f:88:6e:c1:60:29:68:fa:97:ea:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:19:A4:0C:AF:DA:84:34:EF:F4:FF:BF:BE:CC:6A:87:DB:9C:93:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:4040::/46
Signature Algorithm: sha256WithRSAEncryption
ae:be:87:06:c2:32:1e:d5:71:8f:2b:90:78:e0:82:ca:b5:e7:
dc:12:b1:26:b2:dd:d8:d2:11:87:f7:2b:62:ae:7c:a7:dd:6d:
e9:46:f6:cd:34:cf:c6:b7:4f:4b:25:2b:08:4c:f3:6c:0e:bd:
67:c1:8d:48:3b:80:1d:37:36:37:01:03:c1:04:71:aa:30:a7:
e4:c8:a2:9c:b7:fa:d2:24:6f:21:d7:9a:93:d0:11:7f:69:75:
08:3a:fe:f6:00:36:f3:53:b0:9a:7e:ce:3f:02:9a:7c:e6:71:
f6:1d:94:a5:2b:d3:51:77:28:38:ab:fc:7a:9a:04:4d:19:44:
5a:f3:94:67:4e:dd:19:c7:7f:b9:74:89:2a:6c:5c:66:b7:1c:
dd:17:29:56:92:4f:cf:ff:d1:e0:a9:c1:67:8d:95:50:fa:ed:
83:ee:2f:b7:66:8c:ee:57:42:eb:ba:cc:b3:d7:f8:e5:18:c0:
4e:73:42:d2:6e:e9:3a:e3:4c:f6:4a:4b:4b:08:32:07:23:d5:
d3:74:a4:e9:e3:6b:fe:c6:e9:4b:bb:b6:d7:7b:46:ff:7a:3e:
bd:dc:0e:02:d2:23:90:2a:af:a6:37:12:65:ef:3e:d1:89:8c:
02:94:53:51:ad:96:9e:ed:e3:c0:77:d5:b7:49:df:85:fd:88:
c7:9e:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:01:03 2025 by rpki-client