Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
File: fad76837-d6e1-4885-9781-3088c0b0c06c.roa (raw, json)
Hash identifier: /lRxmiDHg3uL7nAg+gKVBeS6xhcVmYWyHoGQ8brDKbU=
Subject key identifier: 78:13:13:CC:D2:6A:B0:3F:6F:E8:B4:E2:71:03:F0:B4:69:80:77:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72EB0E520CDBA4EF709A1C437C07B61F61F8D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:eb:0e:52:0c:db:a4:ef:70:9a:1c:43:7c:07:b6:1f:61:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=03f072902423d8a2975b0fd3b5aead7f202ee5f6732e90ac252420e73cb1307c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:1c:ad:69:d4:46:46:d2:ca:eb:c9:40:28:
41:a8:3b:21:41:c5:a7:7f:af:11:34:23:be:82:7b:
70:3e:4b:2f:83:03:e1:d5:4c:62:18:ea:4a:b5:51:
c2:d4:b6:b6:81:3f:52:a5:35:d1:8c:77:13:6b:c5:
ad:8d:01:df:4c:96:a1:7d:cc:50:05:e8:72:eb:50:
a0:96:f6:a5:c9:7b:20:c2:a4:74:bd:f3:fe:f1:8e:
63:97:58:75:20:33:e2:28:58:69:5a:e9:ff:a6:d7:
c1:14:58:75:3f:ef:96:44:03:c2:03:31:8d:63:62:
c0:81:85:ce:88:b4:3e:69:75:a8:2e:6f:c6:1c:67:
31:ee:ad:e7:80:97:41:aa:31:77:fd:d9:d0:12:b9:
4d:7b:5f:73:95:1f:e3:d3:ae:08:6d:5e:60:6f:d9:
41:24:61:e2:07:75:7b:1c:0a:8d:e1:55:3a:65:c0:
17:1c:a9:e3:32:2e:7b:74:75:5e:f6:27:9f:7b:62:
32:cc:24:bb:a0:ef:b8:1a:36:20:69:e2:ec:7d:66:
d5:03:51:41:11:f3:b5:7d:21:57:08:58:77:2b:51:
7f:e6:2e:fe:69:d1:12:65:c3:39:75:db:81:a1:49:
d1:9b:7e:e0:30:47:a4:86:df:5c:4b:e7:4a:e9:c2:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:13:CC:D2:6A:B0:3F:6F:E8:B4:E2:71:03:F0:B4:69:80:77:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:6000::/40
Signature Algorithm: sha256WithRSAEncryption
8f:0e:98:ce:3b:0c:a9:13:7c:ec:48:a0:5d:b4:b6:46:88:36:
f4:68:29:d2:87:11:7c:69:3d:cc:93:ce:8b:05:98:38:c6:11:
a3:79:7b:61:d3:6c:f9:db:e0:51:fd:72:d1:22:9a:24:68:24:
c4:b8:1e:9f:64:00:6f:bd:a1:ed:5e:0a:a1:5a:89:be:33:07:
81:93:81:18:d2:13:51:73:28:36:46:20:03:9e:08:77:34:41:
71:a9:a9:08:a5:df:28:96:6b:9e:cc:c4:07:87:96:f1:4e:8f:
75:d0:08:86:88:5e:7c:ad:97:fa:53:3b:df:ff:9d:07:63:4c:
ee:d0:7a:31:cb:12:bf:48:d6:1b:ea:10:d8:27:c1:a7:53:4d:
c6:6a:b2:b6:d5:40:17:a7:37:96:9d:b1:5a:de:8d:6b:0d:4e:
90:c4:90:01:26:7b:aa:f6:11:c6:56:85:99:80:fb:4f:76:b0:
91:a2:d2:b7:67:7a:11:ae:cc:ee:d2:cb:cc:fc:0b:d4:90:27:
e1:3a:77:42:86:38:e3:8a:c0:34:3d:5a:55:a9:4d:30:bb:64:
35:60:08:af:43:cf:d4:81:36:d9:f9:70:23:1e:f7:02:bb:7e:
dd:11:ae:09:2f:8a:af:fd:65:cb:82:50:d6:a5:01:77:74:bc:
56:1a:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:54:10 2025 by rpki-client