Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc40321f-72c2-43a4-8c42-0e935f8f1943.roa
File: fc40321f-72c2-43a4-8c42-0e935f8f1943.roa (raw, json)
Hash identifier: iQakna7nbaokIgbNcWCTVes7RTORK0zmzEKSOrwxFY8=
Subject key identifier: 1A:D7:88:19:F9:53:3C:2F:C7:65:44:F5:26:0B:42:EC:B2:26:D2:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 574A21E20A6F8E7F0ABCF53BDB0C0D20B8392043
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc40321f-72c2-43a4-8c42-0e935f8f1943.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:20c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4a:21:e2:0a:6f:8e:7f:0a:bc:f5:3b:db:0c:0d:20:b8:39:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=740e4e184f7ce5e73f4c76eced5c23323b95f71fe7e8b40547e8adca7257824d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:ac:eb:83:8b:6b:77:06:13:40:61:73:ed:
e6:29:49:5f:a3:fe:99:42:af:d3:80:fb:ee:6a:bb:
a5:dc:a5:25:ec:fc:78:58:df:b1:e6:a2:3a:53:3f:
6e:2b:b6:84:8e:ec:d8:81:66:ff:a7:3e:39:af:c4:
89:29:15:b1:3e:d3:ed:97:8c:29:82:15:6d:52:4f:
a4:67:64:14:29:01:e5:f8:77:cf:4f:35:6a:84:f9:
6a:b4:f4:73:d9:1c:d2:5d:cf:3b:c1:b3:6e:0b:48:
84:17:c9:a3:e9:39:17:0f:90:99:39:c3:59:a2:5a:
a9:d7:91:4a:a4:96:90:67:65:38:c4:55:40:75:d7:
37:86:11:94:0d:09:24:55:39:0a:16:8f:36:b2:f6:
2e:09:a4:20:d0:82:c4:0d:28:15:56:fc:b5:22:bf:
32:f1:54:ad:fd:ca:3f:43:a6:1f:10:dd:3b:47:a7:
9b:c1:b9:66:90:d0:2d:1b:b3:59:8b:3d:29:15:fa:
ca:83:e5:cd:5c:c6:27:82:5d:35:f2:05:fc:8a:e4:
59:7b:e9:67:46:ec:55:2d:50:c8:68:a4:4f:aa:d9:
e6:fc:33:3e:90:9b:6c:12:d3:d7:29:a9:e4:5d:d6:
06:bd:0f:ff:43:01:3e:ba:76:c9:f2:ed:87:b9:e0:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:88:19:F9:53:3C:2F:C7:65:44:F5:26:0B:42:EC:B2:26:D2:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc40321f-72c2-43a4-8c42-0e935f8f1943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:97:e1:13:10:3f:62:ae:06:18:6e:a4:19:de:b8:d8:88:7f:
71:d4:13:9f:e5:9b:9c:d8:75:a5:00:9a:dc:c4:e7:d9:0d:19:
31:a5:fc:85:a2:10:31:69:9f:b1:25:80:14:f0:5d:e8:7d:5f:
b0:43:01:72:ac:71:d4:56:78:60:d5:9b:a6:76:19:a0:28:2e:
63:62:bf:73:e1:bc:f3:c1:a1:69:53:27:dc:39:cb:8e:12:ad:
26:9f:0f:7a:c4:ef:42:69:28:3e:fc:1e:d7:f8:d8:e2:dc:0b:
dd:03:ed:43:4f:c5:2a:41:f1:9b:5d:f3:d7:cf:a1:2c:be:78:
61:ca:5c:6c:04:19:ca:4b:14:e1:ba:2a:74:ed:47:00:ef:1f:
b0:30:af:67:dd:04:76:45:c2:27:09:f8:d5:a3:57:c9:29:99:
e1:5e:5c:3b:f2:0c:c3:6d:44:21:e7:a1:58:cf:ac:b7:8c:73:
3a:91:7a:92:7e:8c:60:de:fd:0f:06:3f:01:46:69:ad:c8:3a:
1d:32:e7:2f:99:a9:06:8b:0b:24:99:c2:6c:82:d6:6a:01:a5:
6d:3d:9b:79:5f:85:92:38:f7:d5:a2:34:6f:f6:29:92:d0:50:
49:84:80:88:e5:0f:67:86:cc:17:a9:6d:31:97:fb:00:b6:66:
5c:a4:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:31 2025 by rpki-client