Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
File: f757d966-a37e-4dd4-896c-8caa86d1e20d.roa (raw, json)
Hash identifier: im3Bnjrz8o1/wNN05QR+xdyMd5luAmSoUSbnNTthhOY=
Subject key identifier: E2:0A:7E:55:E3:83:5D:B5:D7:25:BD:F4:0E:22:26:0B:E1:AD:B9:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5050E31AD4C5459EBC2D137FCA550F290EC0227A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:50:e3:1a:d4:c5:45:9e:bc:2d:13:7f:ca:55:0f:29:0e:c0:22:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a7bd2aa11fe9b030ea756c72a0815939ebb95e7a302ff3138e5f2f81249bcee2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:18:ee:72:8a:64:87:90:93:38:1f:df:25:
bf:ed:80:a9:29:a6:c1:8b:dc:16:63:ab:e7:c9:7f:
09:f6:6b:ce:ed:51:65:1c:47:00:77:20:f1:03:a2:
5c:7c:22:65:f0:ba:fb:48:d9:65:2b:a4:d4:48:63:
11:98:3b:ae:3d:0a:25:59:2e:65:1f:fe:f1:1d:06:
99:37:e1:fd:7f:2e:02:f7:d3:3e:2b:b0:60:47:0b:
c0:24:34:5f:2b:16:6e:82:37:6b:fb:22:73:bc:9b:
97:ac:9c:21:33:7b:2c:e1:69:24:52:27:84:10:45:
5e:b3:6d:37:fc:32:48:82:a7:6e:49:27:9a:86:a1:
87:d9:fe:9a:ad:d9:02:59:06:a4:6b:e6:5f:1f:48:
c4:8a:88:db:93:f1:f7:eb:80:88:51:40:5a:34:ec:
dd:19:05:45:48:42:33:4f:0e:1e:46:5c:26:85:6b:
45:56:bb:d1:16:1a:e6:5e:39:5b:d2:c1:86:af:da:
95:a7:f7:fe:26:7f:3e:8c:2c:26:77:6f:a5:e7:0a:
28:72:5e:9e:70:7f:6d:68:b8:e2:8f:10:77:2e:06:
3b:8f:75:7b:1a:db:df:5f:c0:2b:2a:68:57:60:a5:
3c:61:db:4a:00:ac:4f:a5:17:24:a6:95:5f:f3:b2:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0A:7E:55:E3:83:5D:B5:D7:25:BD:F4:0E:22:26:0B:E1:AD:B9:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2040::/46
Signature Algorithm: sha256WithRSAEncryption
56:48:8d:eb:31:ad:cc:c5:3e:1a:95:30:d5:3b:13:fb:9f:8f:
7e:b3:44:de:c8:e4:79:44:4a:f2:91:39:5a:c9:5e:8f:87:89:
52:f7:d8:76:69:57:ef:7b:0b:c3:27:16:66:4b:88:8c:f7:e8:
9e:88:4b:d3:2c:c4:26:a2:94:06:6d:5a:71:d0:2d:79:85:0c:
cd:44:e8:11:f1:bf:3a:a8:74:08:49:18:8a:63:a4:67:95:62:
82:60:b2:2d:af:fa:1f:f6:63:b3:85:9a:a5:da:f5:27:43:f9:
c5:9c:63:f0:ab:7e:a3:f7:b5:b6:bf:67:0c:2b:cc:13:c6:ff:
1b:4d:b4:3a:41:7c:f7:77:a6:78:cf:35:eb:c3:c8:82:66:66:
d0:fe:a2:b0:22:db:a9:2e:c5:09:c6:3b:15:e1:ec:07:1a:2e:
3c:fd:48:78:a8:12:3f:d2:12:c6:c4:f9:ea:a0:e4:1f:15:e7:
ee:a2:f2:cb:3e:c7:04:f8:3a:16:02:17:3d:8b:e8:ba:ce:d0:
a6:2d:7d:f0:0b:ce:0c:20:85:3f:85:67:6b:f7:ec:1d:f5:85:
59:bc:ca:07:ed:97:5e:33:2e:dc:a1:35:1f:c4:3b:25:a8:6e:
39:0b:c7:66:0d:c7:f5:36:c9:40:6c:1b:2f:d3:6a:3a:18:b0:
4e:2c:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:09 2025 by rpki-client