Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json)
Hash identifier: KAIGXGo541xh65RIhqgbWbmGV4QYls3+KrMvzmMRDV8=
Subject key identifier: C7:B8:A7:81:8E:43:56:8B:5B:49:4A:3E:C9:B9:71:E6:66:31:2B:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 696E92EEA0763C1A95C4328CDB4CE6B401554FBA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8030::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6e:92:ee:a0:76:3c:1a:95:c4:32:8c:db:4c:e6:b4:01:55:4f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ea3943c28b45955e4bf96a44a2a3c3274d60e863ffa97b648ca180d1d6925a5f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:60:a3:76:e0:f9:b9:db:f6:25:bf:94:e6:
99:5f:38:f6:0b:8c:0c:47:b8:da:e7:4a:81:97:1b:
7f:90:9c:1a:59:b9:7b:ee:16:68:24:b0:52:d1:e3:
74:09:e0:b7:8b:96:9c:e3:0e:05:3a:b0:8c:29:31:
33:8e:ab:b6:4a:3d:aa:11:d4:5b:5c:9d:c2:10:65:
c3:b5:3b:11:7f:e8:cb:f1:82:f4:e0:42:93:ec:21:
b1:47:06:1f:82:57:00:9e:b7:b6:6a:db:39:b0:ab:
5a:1b:8a:c2:38:3d:22:50:e6:30:1a:af:a9:70:6e:
e8:fe:94:e1:c7:cd:4b:0e:ad:9d:d9:1b:92:53:b2:
f4:e6:24:cc:f0:79:e7:d8:91:f3:69:ec:9e:4d:95:
7b:fc:c4:f0:df:ee:eb:6d:0d:05:4e:1f:e9:a7:b9:
e7:63:76:92:68:6a:79:40:9d:b9:1a:ae:98:f3:8f:
02:78:91:58:34:ab:e1:0f:8e:82:96:8e:6f:40:55:
96:d2:71:e5:e4:07:77:3f:c6:f8:fa:3d:6d:f0:4a:
6e:48:44:7b:27:88:b5:46:f9:20:40:7c:4a:66:67:
73:a1:2f:bb:c7:fe:44:16:d9:4f:33:ad:12:aa:49:
3b:ef:0e:f9:22:5d:70:71:d3:3a:88:09:ab:e6:b2:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B8:A7:81:8E:43:56:8B:5B:49:4A:3E:C9:B9:71:E6:66:31:2B:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8030::/48
Signature Algorithm: sha256WithRSAEncryption
1d:8f:11:c9:62:cb:8d:dc:17:8d:23:29:08:6c:5d:03:72:47:
0c:0c:54:a7:ba:fd:97:63:24:8f:db:45:39:29:3c:37:2a:f6:
ab:4f:b6:02:d4:db:b1:c1:84:4c:e7:a3:7c:2c:3a:55:6b:c7:
4c:f0:25:cd:ab:16:56:ba:5b:15:27:19:2d:36:c2:1b:c2:3c:
00:15:de:d6:73:b3:2a:d6:5c:b3:56:6a:e0:db:70:f5:b7:17:
0c:49:53:44:a1:78:25:2e:91:90:ce:8c:a2:3c:fa:02:bf:57:
e2:33:3e:72:99:0b:d3:2d:b7:e9:83:cb:52:3c:a3:59:f8:92:
63:c7:98:5b:43:01:64:1e:22:11:df:25:54:71:13:43:2f:bc:
47:c2:25:2d:49:83:41:a7:cf:98:20:be:de:13:dd:c5:04:8f:
74:a5:e4:20:96:79:e3:1c:65:0e:ba:4d:70:89:a6:c1:25:df:
03:48:6b:d1:e7:3f:8b:ff:8b:37:6b:f7:73:55:7c:cc:36:ea:
8e:68:67:38:49:a0:bb:45:33:03:23:ff:ba:35:dc:f2:0b:7d:
09:f2:54:c8:8e:18:84:ef:ba:49:3b:9b:fd:12:fb:eb:61:4c:
60:84:97:ce:34:39:f9:90:be:8d:e2:f8:a0:8c:25:c9:45:bd:
96:35:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:47 2025 by rpki-client