Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/238151b8-1527-4e3f-a1d3-da02d03534a8.roa
File: 238151b8-1527-4e3f-a1d3-da02d03534a8.roa (raw, json)
Hash identifier: ypob7TWVHAaknTKDtgMZwl1lP/EwijR/HuMxmS9siDo=
Subject key identifier: 20:75:C0:92:09:2C:38:CF:BB:6D:8C:66:A4:33:A1:12:C9:B0:EA:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F2CA20A8D612796242C16FA530EB72CDEF49F29
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/238151b8-1527-4e3f-a1d3-da02d03534a8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2c:a2:0a:8d:61:27:96:24:2c:16:fa:53:0e:b7:2c:de:f4:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a29f3c2ce933d9124150fdec4395f02ebed84989dbebdabf685044c31ab41cb2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:96:42:7f:e9:da:39:85:2b:93:b9:a2:ce:
19:ba:89:c3:98:bc:29:11:3d:76:88:6a:31:59:4a:
19:63:f4:32:37:89:60:d7:e3:88:d1:68:d5:6c:68:
68:30:e7:cd:f0:04:36:da:f7:04:5e:76:55:3e:eb:
09:6f:d7:d7:c5:d3:33:d3:d4:43:8a:7a:76:81:4f:
44:68:79:c7:50:cd:14:a7:6e:6d:46:1d:cb:01:b2:
59:d7:db:45:24:29:07:8b:1c:9f:bb:5d:2f:e9:2e:
4e:f3:c0:7c:93:b5:64:18:76:be:e5:c6:08:31:e4:
ae:fb:ef:63:dd:44:75:e5:5d:55:95:76:3c:ac:ea:
8c:9e:4e:86:65:d3:10:dc:37:e1:88:8c:0a:c2:40:
8d:a8:49:e5:1a:aa:97:2d:81:cf:d1:db:20:4f:f7:
74:ef:28:4d:65:3d:06:e8:12:7c:30:93:d3:ef:8d:
db:10:ad:6c:ed:3e:3a:37:f9:dc:8b:b1:d4:6c:ae:
81:c4:b3:ca:20:28:e6:ee:c3:63:b6:eb:b7:cf:86:
2a:85:b2:c8:da:b5:8c:f5:b8:0a:88:01:8d:16:c1:
f9:1f:08:84:a7:8e:72:7d:2b:aa:fa:fd:92:32:20:
8a:58:38:26:7e:30:53:26:9f:7e:ee:2e:2e:83:76:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:75:C0:92:09:2C:38:CF:BB:6D:8C:66:A4:33:A1:12:C9:B0:EA:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/238151b8-1527-4e3f-a1d3-da02d03534a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
75:c1:92:b0:0e:b5:49:b5:55:11:74:60:13:6a:f0:fa:87:cf:
b5:79:de:c9:a1:5e:4c:54:73:6d:9e:d2:48:d8:55:28:90:c6:
cc:a7:c0:02:8f:8c:37:89:8e:36:42:44:1f:5f:71:13:8c:2d:
30:b4:fc:f2:cd:70:bc:77:60:8d:26:cb:2a:e8:e1:37:d6:56:
92:08:fa:17:6f:88:18:ae:f5:ee:a5:b9:c6:64:fa:5b:a3:c5:
ce:0d:fe:fb:78:dc:49:d2:26:b2:89:e1:bc:73:1c:55:4b:8f:
4b:ee:89:46:1e:36:d5:db:61:db:9b:a2:63:5b:f9:2f:40:c5:
1a:d8:85:91:74:85:4b:01:2d:2e:c3:ee:f6:03:7b:01:5e:36:
87:55:5a:68:11:7e:f9:01:c4:fe:42:46:f2:62:70:0d:4a:0c:
87:49:e5:08:cd:41:22:c7:65:8b:cc:8d:70:92:49:4d:28:4d:
66:d3:c4:a3:a6:0e:02:c2:14:88:f6:61:59:23:6d:ef:7e:e3:
c8:83:71:75:97:29:d5:31:e5:2b:1f:22:a5:43:37:0b:62:9c:
e3:7c:9b:4c:e5:fe:75:c0:77:6e:c0:a6:e0:ad:95:d8:53:fa:
81:d5:68:01:33:81:9d:3b:13:36:54:b2:b7:61:3b:26:e9:c5:
df:46:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:18 2025 by rpki-client