Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa
File: 245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa (raw, json)
Hash identifier: acGDUDkziiavyHuPE1yGFRkeHbBFxyF1USiaAIN/AsE=
Subject key identifier: 5B:73:42:A3:3B:26:14:24:E6:98:BB:08:8C:69:A7:9A:79:95:DF:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4994D90A16D62241FA6C9D8AD1FFD3B8FAB9BFF8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:80c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:94:d9:0a:16:d6:22:41:fa:6c:9d:8a:d1:ff:d3:b8:fa:b9:bf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4435ce1fd79464de7b18542e331bf09a5b409f95b43f72b3aa7e10c1cc7c2f77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:62:a2:0b:1e:06:8e:e5:c7:18:10:27:0f:
4d:e5:36:b7:a6:9f:b2:dd:fb:af:15:4d:f4:ed:61:
a8:83:97:f2:f0:4b:96:f5:fb:ed:02:17:47:7f:e7:
5f:75:4c:9e:01:f0:ac:9f:ec:71:06:ca:c8:ee:1d:
2f:8d:8f:6c:53:b9:0c:8d:34:ed:c6:70:ac:3c:15:
73:e1:41:73:c5:3a:18:83:94:62:66:31:9d:0e:db:
8f:65:e2:e8:a7:eb:00:38:38:21:e5:0a:6b:c9:7d:
82:c4:6d:f3:68:f7:e2:c3:43:6a:09:8c:e4:04:c5:
e6:2f:47:fa:46:33:b4:79:e4:4c:22:a0:c7:bb:bb:
d0:c3:1c:c8:82:b5:54:c8:e6:07:7b:8b:55:0a:7d:
76:03:f4:c8:ee:0d:cc:e7:bc:ce:a7:2a:7d:ac:d3:
00:0e:aa:bf:a4:9a:24:d7:2b:8f:e2:15:f8:ef:5d:
af:b9:09:4a:ee:66:79:1f:4c:ef:1d:d7:4a:96:6c:
31:b2:be:c9:73:e6:f1:22:fd:a8:8a:cb:fa:08:4c:
27:84:b4:3b:c6:fa:96:9c:d9:d4:64:ef:a5:c1:72:
ca:5e:fb:9d:ac:f4:e5:42:6a:96:7f:ae:6c:b8:5e:
68:15:02:d2:f9:17:78:3d:73:67:b2:75:dc:6e:87:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:42:A3:3B:26:14:24:E6:98:BB:08:8C:69:A7:9A:79:95:DF:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
0f:de:78:d6:6a:9c:a5:10:b3:cb:03:52:3a:16:45:5c:b5:9a:
e0:11:81:63:41:46:d7:d8:4d:61:ea:86:df:e9:d0:ab:b0:02:
59:2f:66:a7:7c:69:69:85:dd:76:87:1d:59:20:91:69:30:54:
cf:d4:4d:5c:ee:af:c2:98:21:24:44:72:61:13:69:c6:1c:09:
f5:d1:c3:16:5e:96:9e:cc:ed:47:8e:3a:f5:96:74:6b:45:a5:
82:69:79:25:57:25:f9:ce:df:ae:ee:7c:9a:33:3b:dc:a1:24:
8e:44:29:f3:bc:26:a6:48:04:1c:9c:bc:cf:83:6b:81:32:0e:
bf:27:49:83:b5:cf:a9:63:84:0e:4e:2f:ae:cd:33:f2:1d:ab:
da:c1:cf:38:08:af:63:07:7c:a4:d9:5c:32:40:85:7a:89:c6:
ad:63:77:dc:d5:f1:4d:3f:38:d5:de:a0:d4:78:aa:e7:1e:38:
8d:b1:eb:ed:c3:5c:b7:3d:65:4e:2b:88:57:ca:df:dc:09:a1:
ab:46:96:e5:cf:2d:e2:9e:fd:76:7a:c4:89:70:34:e4:4a:11:
a4:dc:9b:a0:cb:ef:c2:4f:38:66:85:df:f5:ac:db:98:f3:ee:
35:01:e9:ef:29:9f:99:18:2d:50:86:1e:c1:5e:4a:46:c6:99:
74:bb:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:42 2025 by rpki-client