Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
File: 0849241f-abaf-4c57-aadb-d881485a0aac.roa (raw, json)
Hash identifier: TjfDWpwvF2ZgiEw7kDff3vxcOdM2fLXnVul3rA2ICas=
Subject key identifier: 7B:30:91:82:D7:28:F6:D9:AC:B4:E2:C2:C3:BA:4F:19:74:C1:B0:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 644BAA5AD0118FCCC1B6379F99F82DACFABAE1EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4b:aa:5a:d0:11:8f:cc:c1:b6:37:9f:99:f8:2d:ac:fa:ba:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9f274d99902af37a2f10e01665dc068b032380e6953d211895b382acc6a4b1f6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:43:19:17:ee:41:cc:4f:ba:7e:0a:41:f1:
08:cd:e6:8f:a1:ba:77:15:d1:17:14:42:ff:35:02:
a6:68:b6:6f:6b:35:6c:5e:a6:00:28:33:98:10:c3:
ab:8e:ae:27:ff:03:00:f9:4b:a7:9f:f2:4c:f8:41:
6e:cd:5d:5d:7b:2f:66:b8:b3:0e:3c:66:03:99:78:
5b:e2:ab:87:4a:e1:33:fe:19:f9:c9:5f:9e:21:17:
bf:bb:40:b2:f3:0e:75:fb:5d:e2:cb:92:df:e6:0d:
6d:da:48:d2:cc:ef:8f:d9:97:17:c8:c2:47:c4:b4:
84:83:8f:6b:6a:7a:11:6e:f9:a0:0a:81:1b:b2:6a:
db:93:1e:53:79:e3:55:79:89:e1:ab:6b:d5:d0:65:
26:d3:b2:8a:f2:8c:f5:24:e0:a5:fc:d2:a8:a0:a0:
db:e4:05:60:02:b7:fc:e3:ef:a5:1a:c2:00:70:84:
46:0c:b4:b5:29:d6:05:77:dd:8b:ed:ef:74:80:82:
ea:14:a1:32:0f:72:f8:b6:02:34:5f:78:74:e0:94:
dd:80:32:9d:e7:b2:a2:36:47:12:9c:82:8b:1b:0e:
27:90:3a:01:2f:1a:a9:60:40:0e:1e:b0:e4:2c:1b:
35:34:a2:a2:2c:00:d2:9d:91:70:db:90:a3:22:5a:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:91:82:D7:28:F6:D9:AC:B4:E2:C2:C3:BA:4F:19:74:C1:B0:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/38
Signature Algorithm: sha256WithRSAEncryption
46:6b:2e:de:2a:47:76:8c:5d:b5:95:22:94:ed:8c:14:6c:88:
32:ac:76:30:7e:7d:2a:d0:cc:22:2e:cb:6a:48:ae:9f:ef:91:
af:2b:7f:92:d5:2d:e2:0e:e1:ab:6f:e9:81:dc:9e:2b:3d:4e:
fa:7a:fc:9c:71:9e:56:6e:e4:7f:d0:ff:09:dc:fe:a8:a8:1d:
65:f6:31:ed:77:62:74:a1:cd:e1:b4:12:90:b2:36:46:1f:32:
fc:9d:4e:3c:a4:78:43:71:e9:05:49:a4:9f:0c:60:8b:f1:dc:
c7:3c:91:e4:7a:fe:61:dd:0b:3f:2d:e7:d9:d8:a9:39:d3:43:
b1:82:9b:79:7e:d5:17:25:d0:33:38:1c:8e:5f:ee:e4:8e:3a:
09:36:1a:25:2b:7f:11:d6:80:92:fd:ae:52:72:c7:b5:dd:e1:
6e:07:b7:8e:cc:30:7d:66:dc:a3:68:2d:c7:f7:a7:4a:05:b0:
b1:0b:7b:3e:cb:47:8b:fa:ff:14:12:9e:18:60:2a:0d:11:54:
8f:ac:be:5a:f5:55:f8:9d:85:b0:90:d3:c6:49:4a:c0:f6:2f:
45:d1:d1:b0:a3:d6:d7:ee:56:6d:38:60:1d:87:fc:14:66:97:
f5:8d:55:af:f7:95:33:69:6e:12:fa:29:7b:07:9d:96:79:72:
59:b6:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:31 2025 by rpki-client