Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
File: 0f3fbd71-85b4-48a7-8479-e942c9578262.roa (raw, json)
Hash identifier: yvUT1GWsQH0xweIQ2aBFI/VuGMF2GwLr2Prbo+qWXZE=
Subject key identifier: 7C:FF:9E:83:C8:B9:0B:82:CC:17:53:DB:71:6E:63:6C:E3:66:94:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 345F7799A52F6EF1AFE63FEFA92F3CC6C98DBA6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5f:77:99:a5:2f:6e:f1:af:e6:3f:ef:a9:2f:3c:c6:c9:8d:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=af3f4e3787475db9ce4ec3f2b3ce3d537e350cd910658a63e60428c4a1d68dcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:53:94:2e:8f:23:f6:c5:82:cd:4e:37:cb:
a7:38:a1:d3:b1:96:a1:25:ef:fe:3a:b7:2a:12:f2:
a5:ef:2f:b5:97:0c:c7:92:c5:ac:80:02:70:c4:2c:
82:6e:c0:7c:05:ff:af:53:5d:a3:9f:09:91:aa:b1:
12:fd:87:1d:b1:1a:71:0e:83:18:0d:3d:8b:1f:bd:
9b:58:0e:3a:2b:cd:77:fa:79:50:f7:ac:10:2b:f4:
e8:ce:da:7f:03:14:60:a5:e4:06:04:95:c9:82:0f:
68:a0:4f:d8:d4:66:af:a7:71:37:1a:24:04:93:3e:
a0:33:6f:9c:fa:5b:99:c7:0f:dc:85:86:7a:eb:40:
bb:75:dc:18:5b:cb:4d:a5:c2:73:e2:8f:46:9f:18:
50:ce:31:10:e2:8a:83:c7:64:8a:05:2f:3a:15:06:
03:b0:dc:3f:4d:e4:05:c3:b0:ba:b6:84:41:0e:ca:
70:50:fa:54:88:ac:f8:a1:7c:a0:1c:cd:3f:05:34:
8b:37:77:76:de:d3:5a:1d:bf:dc:6c:3c:e2:e1:de:
06:19:08:d4:ed:fc:63:3e:f5:bc:cf:5f:86:07:d0:
d5:6a:47:44:4d:ae:02:6a:a6:67:a5:17:2b:d2:de:
17:59:16:47:35:ee:a7:15:bd:05:7a:d2:32:fe:02:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:9E:83:C8:B9:0B:82:CC:17:53:DB:71:6E:63:6C:E3:66:94:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:1000::/40
Signature Algorithm: sha256WithRSAEncryption
3b:9a:53:e1:95:2c:79:5b:48:74:16:06:64:2f:42:3f:a5:de:
be:d0:da:24:c1:74:9d:ff:65:c2:37:9a:83:8e:52:59:8f:bb:
0d:1f:3e:98:4d:9c:01:4a:bf:34:4b:8f:4d:df:7d:3e:fd:09:
a0:19:44:ba:46:57:c8:31:92:22:77:ec:f7:d7:17:91:1f:ee:
0f:25:fd:83:3c:1b:0c:aa:fa:69:e4:70:c9:10:ae:91:55:ba:
a9:61:2c:0f:23:a0:50:e5:2f:d3:2f:b1:89:ec:91:c3:fc:07:
cd:e9:e6:b9:8c:2c:a4:03:d0:21:da:5d:01:1d:b2:7d:07:5b:
4c:07:38:28:d2:18:ff:e6:af:81:93:96:c6:ac:8f:9d:e2:41:
8b:b5:46:95:2e:d4:0c:5a:95:22:6a:6b:95:c9:8b:8d:0d:c5:
e0:a7:cb:23:5c:54:3f:64:3b:77:77:4b:2c:3f:1e:75:d7:82:
fd:ee:ea:6f:46:65:5b:60:7a:a7:fd:c2:91:66:5f:8e:b5:bf:
6b:78:a8:e5:d7:a5:f6:ad:21:eb:40:33:02:e6:a1:ba:94:c6:
16:71:8e:b6:fd:eb:80:c5:89:3c:3e:c2:48:a7:5b:66:9b:cb:
8c:b1:fc:3b:14:3b:18:4f:06:4b:78:39:65:3b:18:cc:14:7e:
9d:ef:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:53 2025 by rpki-client