Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c820f01-3562-4b93-8081-8c9b4d28a11c.roa
File: 1c820f01-3562-4b93-8081-8c9b4d28a11c.roa (raw, json)
Hash identifier: 9jPslPvMV4bL81eOGCebEGZB2BOtJvDok5Zey8mJBys=
Subject key identifier: 1C:50:0C:09:33:4B:54:CA:EC:F0:9B:73:E9:F4:9A:AF:8E:CA:66:7C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 328F21D5C3776CE9A07B62071025D3468E03184A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c820f01-3562-4b93-8081-8c9b4d28a11c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8f:21:d5:c3:77:6c:e9:a0:7b:62:07:10:25:d3:46:8e:03:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=a7b8d128d0c0acf38d603bc4e6c9e20c03d33eac3217c8c11475c649f32c4d7b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:84:f6:77:b6:d2:eb:8d:57:c3:4c:12:47:
ee:26:c3:da:a3:a3:2a:05:d1:43:da:3d:33:ba:c6:
77:90:02:57:56:c9:22:ac:46:13:5c:75:76:5b:49:
39:87:57:9f:ec:a5:79:ea:2a:7a:80:4c:d3:45:10:
76:bd:d0:ef:ee:a9:b6:30:4b:12:19:1d:f8:1c:ce:
21:5f:9b:02:87:dd:f0:d9:e1:8d:7d:0a:0d:08:6b:
d4:23:18:59:1d:9f:76:ee:ac:60:0e:ea:37:f6:7a:
7f:ba:2b:6e:bf:28:6e:13:cc:e1:73:a9:e2:79:e7:
9e:f3:64:aa:90:56:a8:13:31:77:9c:d1:cc:f6:93:
6c:e2:5c:7d:92:ca:4f:3c:9a:b3:28:2b:55:96:3e:
5c:bc:7c:05:b8:4b:98:fc:02:df:aa:76:29:e6:32:
2d:ce:c8:46:fa:8c:a1:61:e8:51:01:4a:8a:04:b4:
71:ae:7b:7e:1d:3d:50:53:26:95:32:07:6b:89:83:
bd:91:71:57:73:6d:71:6b:b2:f8:c2:94:18:4d:b2:
f8:9b:e5:02:10:b1:e6:c7:3c:03:44:c4:88:5b:d2:
0c:2d:a4:68:03:7e:27:ed:f4:f8:1e:b8:26:89:af:
c5:fe:a5:c9:4f:30:a7:4a:20:1e:13:09:f1:9d:29:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:50:0C:09:33:4B:54:CA:EC:F0:9B:73:E9:F4:9A:AF:8E:CA:66:7C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c820f01-3562-4b93-8081-8c9b4d28a11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:1000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:5c:ec:a3:d3:14:cc:a7:50:c7:92:1d:b4:6f:9c:d8:8e:3f:
e8:78:f5:ab:65:90:af:55:ee:16:ac:34:70:4e:87:cb:5f:74:
33:67:52:58:30:00:fa:26:00:cd:29:e7:5a:37:5f:7e:e4:5e:
1b:68:fa:0c:c1:72:c1:9b:5a:5c:4d:e1:d5:db:70:b8:eb:de:
cd:03:40:4d:ee:36:ed:5f:04:9a:32:f1:7c:bd:47:f9:b2:c0:
13:4a:97:48:8a:72:34:3a:73:7d:2c:75:a9:17:77:7e:8a:27:
c5:57:22:0d:7e:a2:a7:3a:0f:41:43:41:b3:ed:ef:86:73:42:
dd:8d:d6:2e:4e:32:ff:97:24:84:3d:45:ff:0a:ad:b4:09:52:
50:f5:62:3f:85:f7:7c:53:ba:98:e9:d5:c7:11:23:f9:0b:c8:
95:5f:e8:1b:cc:14:a2:2d:6b:86:1a:3a:dd:cb:1c:50:d6:fd:
72:23:cd:5b:cf:1d:d3:54:7f:4f:a5:6d:95:71:01:a1:b5:17:
b5:65:96:24:41:e0:86:e5:5c:5a:a3:c1:63:d6:ed:4b:c5:ba:
b2:6a:39:8a:0d:4f:87:8c:22:f3:7e:d0:57:8e:8c:dc:6b:08:
21:ae:4d:b2:eb:18:25:54:cd:ef:9d:bd:9d:d8:76:ad:7b:70:
52:96:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:18 2025 by rpki-client