Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa
File: 0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa (raw, json)
Hash identifier: yhjJ62EDiAGuGyDEetIcZ+gfdQTmZBpBPu36HzD/yos=
Subject key identifier: 48:CB:D4:26:F9:ED:58:8F:1E:DD:B2:7F:E9:C5:7C:FA:F0:C8:94:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 244C7353DAA165B87C1AA4B4E7BB205A685C046C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4c:73:53:da:a1:65:b8:7c:1a:a4:b4:e7:bb:20:5a:68:5c:04:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=efa72fbf46c8a1efa389556517a4f8f41b6ad117d77e88c738b3f3c17cd6dc6f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:5d:96:ef:f3:bd:5b:15:f7:c8:13:74:ac:
81:eb:a8:11:4f:9a:ea:b5:4e:0a:93:d6:83:32:c5:
7a:54:53:c2:dc:f2:af:e0:f1:64:ae:86:51:b4:19:
4e:11:08:54:8f:42:ce:28:53:92:5f:06:8b:44:42:
51:71:0e:44:69:92:26:0f:21:ac:3e:f3:fd:c7:0e:
a3:dd:bc:50:d8:be:ed:c2:8c:70:46:d3:81:df:5c:
5c:c0:8d:20:4f:c6:79:57:e1:b9:37:6d:ea:ca:8f:
4d:2c:70:af:38:5e:ec:cb:e5:96:4c:53:90:d0:2c:
83:fc:c0:02:36:d9:36:4e:a1:09:c4:ad:b0:25:58:
3a:e4:de:e4:d2:e0:ab:64:7a:4f:1b:ca:d2:a0:d7:
3d:57:da:da:bc:4a:60:bb:bb:2d:25:da:f2:3a:31:
b0:23:6d:83:10:fa:92:55:6e:47:d8:66:6a:fb:89:
38:65:8a:f8:f4:79:39:ca:d7:ac:31:d1:83:01:b4:
3a:87:c3:87:54:b5:14:b5:d0:e8:19:79:6b:19:83:
2e:c6:6d:c6:69:7d:84:0b:d7:a3:eb:49:de:08:19:
e3:c5:b3:cc:3b:b4:2c:b5:05:cc:f2:92:db:f9:f7:
02:0b:b1:06:5d:1e:65:2e:d8:c0:fd:69:a0:88:a4:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CB:D4:26:F9:ED:58:8F:1E:DD:B2:7F:E9:C5:7C:FA:F0:C8:94:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2040::/48
Signature Algorithm: sha256WithRSAEncryption
54:40:e5:f1:ce:38:db:86:94:14:89:30:aa:84:ef:0b:a2:e5:
8a:cb:9c:9d:16:a5:cb:0e:78:59:74:70:85:ea:2f:d8:09:22:
20:18:0a:ea:c0:75:42:2e:ff:79:0a:fd:6e:98:b3:45:8b:b7:
40:1c:2b:af:fb:39:51:70:4b:ab:b4:05:12:ca:18:fe:28:36:
bc:76:bb:51:ac:f2:9f:cc:84:9f:57:09:3d:ca:64:62:57:b9:
10:e7:71:68:6f:cb:1d:5f:e4:b4:a2:f2:59:94:ce:1e:ae:e8:
dc:67:00:40:bb:fd:7b:4c:f3:e5:e1:e8:44:11:a0:55:95:59:
53:56:2e:c0:d4:79:0c:7b:bf:d2:b5:5a:01:26:7d:7c:3a:a7:
ee:5d:10:87:ce:f0:7f:3e:ea:02:5c:ef:e6:70:da:71:4c:c8:
4e:3c:2b:48:01:8a:87:a2:d3:35:bd:1c:f2:74:0d:34:7c:f2:
67:93:6b:13:ea:be:41:05:86:fb:9f:af:c2:f0:ef:24:e3:44:
49:0f:7d:f4:29:85:e8:7b:95:cd:22:7e:30:27:11:aa:9c:5e:
2f:fa:93:8c:d1:7f:74:e9:0a:d9:ad:e9:8d:62:e4:5f:79:c8:
4e:6f:e2:94:f2:9a:80:e2:ff:7d:83:fe:45:f7:25:4b:1c:b8:
2c:c6:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:42 2025 by rpki-client