Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
File: fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa (raw, json)
Hash identifier: aoODcYDX2N9rJ6bvvgbYVmgVQCh5UaSw+NhiaTNwutc=
Subject key identifier: A9:68:7C:E9:30:F5:9E:3D:44:E0:47:3A:67:32:22:23:0C:43:E8:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DDB0BCA76C846F6038F9C41D1D706C56E7B8611
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:80c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:db:0b:ca:76:c8:46:f6:03:8f:9c:41:d1:d7:06:c5:6e:7b:86:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=eae1f11ec6e89751b6055bd141e2bcbc8e5909b1f6efb657dc2f86c062bb5e68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:65:a1:41:57:8f:92:7d:33:58:fa:76:f1:
be:fa:a5:20:fc:b8:6e:b4:12:92:fb:32:53:73:c0:
00:04:66:4f:8f:f4:7f:3d:eb:fb:15:cb:cf:6e:00:
03:b6:e7:4b:bd:eb:93:69:a2:9d:71:bd:55:06:3d:
76:73:ce:8a:35:fd:dc:69:49:fa:63:28:58:e2:95:
50:58:29:6c:86:0c:74:5a:bb:ac:a8:24:18:c9:f8:
b1:5d:08:8e:ab:b4:8a:e5:9c:72:31:d9:98:e2:24:
c9:6f:e5:60:94:30:86:10:0b:3b:d2:54:78:8b:b7:
9f:33:6c:ab:e2:bf:48:aa:8b:ea:97:96:ad:e9:e8:
b0:fe:3a:81:28:e9:82:e0:b9:8f:d7:4b:da:63:3a:
8c:49:fc:7c:7e:3c:be:bc:03:38:56:c7:e2:c7:54:
0c:4f:d1:b5:ad:a0:1d:1c:3e:17:5a:b5:3f:6e:50:
a9:93:09:92:9f:01:28:ed:73:af:5d:cf:00:49:a6:
80:c8:62:8b:ba:a4:07:28:02:25:f7:65:64:b8:7a:
a5:20:31:4e:32:54:82:39:fd:34:fa:51:2d:0a:bd:
89:2f:fa:aa:a7:1a:6d:19:3d:bd:4c:a2:cc:92:18:
69:5e:b0:13:5c:c8:7d:01:44:e7:d5:1b:65:c8:94:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:7C:E9:30:F5:9E:3D:44:E0:47:3A:67:32:22:23:0C:43:E8:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
28:6f:7e:3e:0b:63:91:9e:52:8f:e2:8e:d7:a3:dd:ff:3e:39:
b6:1b:b0:d7:9d:1b:c3:0d:83:0b:45:f0:24:7b:94:30:18:b9:
45:25:fd:d9:9a:67:53:b9:66:b9:e3:47:bf:4a:dc:32:98:01:
5f:62:6a:89:63:f8:bc:11:a7:46:22:8a:1e:a0:f7:44:26:51:
a0:20:d8:dc:3b:74:b7:39:4b:0d:50:3d:68:ab:1f:6b:1d:70:
b7:14:98:8f:4e:70:3f:4b:64:6c:5d:59:d2:47:b9:2c:8f:66:
30:4e:86:45:58:ee:4e:81:41:fc:d5:4d:e4:62:67:98:fa:20:
7f:f8:94:e8:f2:ff:8a:42:aa:01:b5:59:50:98:67:78:a8:fd:
d4:ae:7a:09:e4:a7:85:d3:f6:05:2b:a0:cf:c8:9d:48:a0:d4:
da:d3:29:13:24:65:93:bb:20:bf:e9:39:73:da:d2:b9:38:62:
49:30:30:e4:6e:c4:d3:90:24:99:e1:e4:7c:3a:a1:50:b5:e1:
94:89:9c:ac:d8:ae:85:f2:6b:a9:28:19:25:7d:7b:34:c6:43:
63:1e:57:8f:a6:bd:c8:5f:10:de:63:75:59:eb:71:2f:b5:aa:
5d:f9:68:e2:03:f5:e8:45:66:36:9f:c4:90:e9:76:b5:71:9a:
67:7c:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:03 2025 by rpki-client