Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
File: 216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa (raw, json)
Hash identifier: 3MAzFGGCIUmg03QgZmBdmoYvANirWWezcbO3JHcr/SY=
Subject key identifier: AD:BD:24:A3:E6:01:54:2C:26:7A:86:C2:56:A0:B3:DF:BB:FE:9B:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21218D3532192B4819328630DB1A7FF291D1D0B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:40c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:21:8d:35:32:19:2b:48:19:32:86:30:db:1a:7f:f2:91:d1:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=2f5518e0a452abc6016fdd716af5ca4b676676aac4f09b7fd6ff0ee2d66694f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:16:61:03:9a:c2:41:f9:17:8b:6a:56:7b:
31:b2:4d:c9:52:d7:22:44:41:c7:7f:2b:93:33:e0:
10:e5:49:59:8b:df:28:e2:3c:11:dc:6c:78:7e:b5:
b7:2c:2e:a8:d3:db:53:e1:7e:cb:be:d5:0b:fa:d2:
6b:8b:79:f3:3c:b9:7b:0a:7c:c6:de:56:5e:2c:dd:
89:c9:7d:bb:78:eb:31:76:97:41:d4:6f:55:af:ed:
78:9a:88:8f:08:4f:46:e7:4e:9b:56:2b:91:3c:df:
3b:e2:e3:e9:ee:5e:38:6b:57:da:77:5e:f1:a6:38:
f2:c5:f7:f0:7d:24:73:0b:62:1e:73:14:21:9f:ff:
38:5d:93:27:22:21:cf:db:b8:53:f7:e3:9a:1e:5a:
32:2e:c8:f8:2a:11:e5:a3:19:4c:bf:24:6a:f7:0e:
38:cf:ba:5c:db:44:60:98:ef:ff:7d:51:57:2a:00:
6a:2b:33:b1:b9:e3:78:27:97:16:d3:79:8f:34:dc:
fd:c7:95:0f:a4:f3:24:ab:5e:2c:3d:be:35:a5:63:
90:93:24:9b:84:6a:b5:a4:b4:be:07:35:92:20:b4:
e7:5a:69:53:4a:b9:ba:d9:5a:f0:7b:16:b5:c0:03:
c3:6e:2b:f8:30:be:59:a5:2a:2f:b2:0c:e4:5c:df:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:24:A3:E6:01:54:2C:26:7A:86:C2:56:A0:B3:DF:BB:FE:9B:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
12:b1:8c:e5:49:8d:94:71:c2:08:7a:50:00:f1:12:a5:46:95:
e7:3a:ff:10:fe:c0:08:e6:ab:91:b9:71:76:fa:c1:8c:7c:23:
c2:cc:a1:58:3f:de:81:cd:a9:1e:d3:c2:3a:de:77:6c:08:42:
f6:ce:e2:f6:97:10:50:43:b2:ba:1d:81:a2:c5:0e:f6:6f:c6:
01:ae:27:2c:c4:77:10:e4:d3:26:19:54:a8:a7:bf:ee:3b:16:
52:b3:32:ba:ff:1f:f3:51:e4:68:44:d8:00:29:94:e6:73:7f:
09:55:72:61:1d:36:97:fc:cb:44:d7:ac:ab:b3:b2:79:c1:a5:
f0:32:12:bc:10:20:91:53:32:2c:0b:95:7f:1c:84:db:1b:90:
28:9f:83:cf:13:b9:1a:15:b8:33:9b:cd:51:bc:99:59:46:87:
e1:c8:f8:c5:2c:fc:6b:36:02:85:89:9b:86:cc:7b:76:60:c6:
53:3e:6c:b7:b6:e8:68:2f:e5:58:53:5a:e9:7e:36:83:2c:80:
b0:99:50:be:6d:58:9b:5d:3f:92:4a:30:7a:2c:34:55:4f:17:
c8:e9:6d:f3:2f:fc:7a:a2:6a:09:6a:6b:a9:c4:f7:b6:7b:55:
b1:dc:2b:23:ed:e4:20:06:6a:0e:4a:23:de:fa:3d:1a:d1:64:
5e:4c:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:25 2025 by rpki-client