Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
File: 24b496aa-161c-4d5d-a9ca-3ba09772390a.roa (raw, json)
Hash identifier: oc8MTkf6D5Gep+alNoIrfbDhh4ikcLz6RT/8z11ZdS0=
Subject key identifier: 7B:0E:0E:E8:13:CF:5B:FA:7C:21:36:5D:0F:C9:EA:64:D9:71:3A:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F460C6E5EFF338003CBFC77172F06C1110B222A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:46:0c:6e:5e:ff:33:80:03:cb:fc:77:17:2f:06:c1:11:0b:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a16c4615c4c773b719163a89606f99b39c096d1c4dbcc560f5704f1ed647ecc0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:9e:0d:b6:ee:71:ec:df:3f:c4:2c:44:6c:
fb:e4:cd:fd:0b:a5:9c:b0:f5:95:95:29:5e:6f:f8:
cb:a3:d4:c3:b8:f3:4f:cb:68:8f:17:d9:c7:18:86:
bc:d1:fe:e9:3e:21:62:1d:0e:9b:aa:9a:17:b8:cd:
c1:9b:61:4e:da:ce:5d:55:81:d2:21:b4:73:c6:8e:
36:c8:93:c4:75:73:8a:2d:6c:76:71:d4:f0:1d:e5:
85:48:55:a1:bf:02:ee:8f:91:42:91:27:54:b1:15:
50:f6:6a:b4:8b:03:57:7e:ca:1e:1b:26:43:d9:81:
5b:6c:fa:1f:ab:9e:a8:d7:fa:36:7d:34:4b:9b:c9:
cc:36:cc:ac:b5:9b:52:82:8e:23:c5:5a:fc:c2:9e:
88:b8:09:cd:05:d8:19:44:6f:04:7f:5b:a1:a8:c8:
f6:52:fd:18:30:11:9a:f3:19:71:e1:2c:fa:78:c1:
33:6f:d6:25:35:37:b4:9b:98:25:cd:03:68:c6:2e:
e1:17:44:de:41:5c:90:72:4b:72:3f:c3:d5:3b:85:
b3:a7:35:98:90:db:31:5f:a5:e5:b4:4f:1f:e6:b4:
be:38:6f:d5:56:bf:fe:e2:1b:5f:7a:c4:99:d4:e6:
68:2b:0e:c0:06:81:ad:b6:d9:61:26:33:9e:2d:1d:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:0E:E8:13:CF:5B:FA:7C:21:36:5D:0F:C9:EA:64:D9:71:3A:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:6000::/40
Signature Algorithm: sha256WithRSAEncryption
b5:ae:b9:5d:8a:18:17:61:b5:a4:95:79:c9:0a:52:fe:85:ed:
70:77:14:12:1d:70:8f:22:4a:65:55:45:b5:e2:fd:fe:d5:45:
b8:b8:16:8f:df:d9:bb:d4:8e:d5:b5:eb:07:78:08:4c:91:b7:
00:30:31:03:b1:ca:6f:bc:29:f7:86:f1:08:ae:ca:4d:ff:a2:
6a:3c:e8:82:a8:b0:e0:3a:50:c1:d9:f3:ff:3f:02:ec:14:92:
37:b5:e5:94:cb:2a:c2:26:66:5e:36:e8:79:a4:d7:bd:a7:65:
43:2d:44:c1:8d:60:dd:84:de:15:52:5b:6f:c8:c1:ca:0e:d0:
f9:3f:88:3b:7c:ba:d9:c3:63:32:76:4b:a3:0c:ea:45:6b:24:
4f:2d:8b:c1:66:d0:14:83:45:f9:af:9f:53:c5:11:01:3c:c6:
48:c6:f3:c9:cb:46:1c:02:24:ed:9f:8f:0e:bb:16:d1:4f:26:
69:5d:30:bb:04:07:e7:73:27:05:ef:31:13:90:a1:f0:d8:71:
9d:6a:86:79:3f:d4:cd:8c:ab:eb:95:cc:06:57:5a:a7:5c:33:
bd:11:c0:bd:a2:90:21:11:f1:a0:5a:3d:0c:a7:14:8d:14:1e:
24:fd:dc:b3:24:71:c5:6c:a0:ec:08:8e:59:74:12:32:ac:98:
02:ba:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:52:57 2025 by rpki-client