Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa
File: 1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa (raw, json)
Hash identifier: aRlxaokAak7My7XDGZ++3bgSI3giLXZJL7h2x9dtAgo=
Subject key identifier: F1:DE:C2:63:BB:2B:92:2A:6E:E4:26:F3:A7:92:5C:54:77:E6:61:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70964E0BBE55FBE662F26B51FB0684EE1F77966A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:96:4e:0b:be:55:fb:e6:62:f2:6b:51:fb:06:84:ee:1f:77:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a5e9a749b17cd6f2e031ffd39616ad603c68fa5b021e82b2476dfb3fbe04d4af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:ab:8c:ef:ae:e8:eb:8a:56:ea:d2:4e:db:
a4:17:5e:82:4f:d4:db:d3:a7:bc:b5:ac:c0:89:c2:
6d:cd:82:71:05:a5:0f:38:47:03:15:7f:7c:0b:8a:
f3:c0:20:4c:aa:1b:e7:e6:2e:ad:ae:f7:53:6d:af:
f0:26:1b:97:7e:40:d8:bb:13:d6:21:00:1e:72:11:
56:04:fa:1f:d9:12:4d:7f:95:8b:7f:cd:ea:20:5d:
bc:aa:08:b8:5c:63:24:15:ac:ad:a3:6e:f8:f5:77:
c8:17:22:51:c6:3f:a4:f7:b0:6a:4d:36:e0:e0:63:
27:e7:e9:f8:aa:e8:91:8a:ba:02:b3:99:7e:93:15:
9b:da:00:b7:b1:2e:fb:96:cf:8f:d9:fb:7c:cb:21:
76:04:4c:55:bb:fa:88:12:2f:97:8e:99:9c:2b:51:
bf:c3:14:d2:2e:c6:37:87:95:e3:1c:0e:e0:91:97:
e4:30:f6:41:30:47:84:dc:93:c5:40:1a:62:cd:24:
4e:6f:29:d3:38:63:9b:48:46:70:ac:ce:c8:67:38:
e0:2d:e2:96:76:9c:0f:cc:ff:7c:d9:34:0c:41:6c:
ae:fc:48:f0:85:33:01:6f:21:76:68:6b:2b:3d:18:
65:bf:30:26:21:ac:67:b3:55:ad:8a:dd:32:59:af:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:C2:63:BB:2B:92:2A:6E:E4:26:F3:A7:92:5C:54:77:E6:61:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a040::/48
Signature Algorithm: sha256WithRSAEncryption
56:97:3a:0e:e2:19:54:4f:09:ff:69:ea:2d:84:c1:59:ed:d2:
66:26:7f:64:7b:6e:0e:ee:ee:73:c0:0c:7d:8f:d0:12:9f:b8:
54:f4:8e:1e:49:54:d1:d6:ad:72:01:d9:da:f3:2e:b7:8e:cb:
7d:9a:05:43:78:02:ee:3e:07:fa:8f:f7:75:d7:29:fb:b1:01:
be:c9:91:7d:b8:57:3b:98:9e:8b:75:37:06:2b:47:bc:ae:0b:
0b:c0:30:d4:c3:bb:ba:02:15:34:d8:ea:7a:84:79:cc:59:af:
c4:bf:a7:af:c9:e1:05:d0:a0:c8:5f:2b:83:33:b6:a8:0a:e4:
34:1d:1d:4f:95:64:2f:67:3d:d1:17:1c:30:b9:27:bf:a9:08:
33:23:9b:11:db:16:4e:9e:57:c4:7e:8d:33:a7:de:01:62:ad:
a0:a9:29:8f:fb:81:1a:8c:f4:ee:1f:8c:97:84:68:29:24:f1:
24:cf:71:89:c9:9d:d0:c2:11:b1:22:d3:19:4e:da:1b:9e:6f:
41:5e:e6:7f:2e:2d:c2:72:6c:97:d1:1c:66:a7:93:45:c2:c0:
ae:04:bb:9d:02:6c:bb:77:77:7b:eb:ae:dd:b2:96:94:34:7d:
69:cd:63:d0:7a:a5:81:a8:31:dc:7c:e2:fc:8c:61:ee:91:5a:
e8:12:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:34 2025 by rpki-client