Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fc0413-357a-4ddb-84e4-70641635a6c3.roa
File: 35fc0413-357a-4ddb-84e4-70641635a6c3.roa (raw, json)
Hash identifier: QorADwAaNtLsAUR3sUVuYXgFer7Z9rrrfhN9LNkh1DY=
Subject key identifier: E4:98:22:96:16:A0:67:D9:04:BC:B5:FB:25:0B:CE:C4:3A:35:E3:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EB79DC284FC2288ABBBCDBF3A4C22F71B7FAA38
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fc0413-357a-4ddb-84e4-70641635a6c3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b7:9d:c2:84:fc:22:88:ab:bb:cd:bf:3a:4c:22:f7:1b:7f:aa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8b5842cac9e88c8ffc9bbd570981ffbd97d02695cc1d3ca399bd73272d92f61f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:aa:b0:a3:7e:e8:29:e5:fb:5c:c9:37:9d:
44:46:25:1f:c4:a9:ce:b8:4e:89:23:d8:52:b9:17:
d9:87:1b:1f:ee:ce:96:12:31:94:c7:3a:db:c4:de:
dc:0c:18:60:d5:0c:73:8f:77:bf:29:6f:40:0b:a2:
44:99:18:b2:10:4e:8c:da:e3:b9:e5:1e:85:62:cb:
23:ad:ca:6f:00:f6:90:cc:9b:d3:20:ac:f3:2b:71:
cc:46:91:da:3b:55:f8:11:80:e2:60:33:d6:87:19:
9e:6f:cd:85:d4:df:3d:cc:f6:61:35:20:01:85:85:
fe:f0:89:95:a2:5b:e0:a4:ff:d9:3a:68:44:4b:4b:
51:16:ea:7c:40:91:db:4f:d9:a5:6b:35:43:59:cd:
6d:8b:cd:65:26:b5:3e:8d:d1:6d:16:69:0b:77:52:
65:c8:ef:d6:a7:26:59:2b:61:61:8d:59:dd:be:be:
0f:c1:d9:10:94:b8:1e:44:4a:da:0c:35:0d:58:99:
0b:73:fa:cd:6d:89:1b:36:6b:05:8e:a2:6c:81:89:
c8:9d:d1:63:41:db:24:95:ff:11:2c:cc:bd:aa:8a:
0b:b8:3a:e2:97:cf:aa:9b:3c:2b:76:df:c6:d0:9a:
40:a8:ac:bf:44:43:53:8e:7a:63:13:24:2f:e2:14:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:22:96:16:A0:67:D9:04:BC:B5:FB:25:0B:CE:C4:3A:35:E3:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fc0413-357a-4ddb-84e4-70641635a6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9040::/46
Signature Algorithm: sha256WithRSAEncryption
98:94:f0:13:5a:59:c0:b7:e2:26:d9:0e:1a:ad:49:38:0d:75:
41:43:df:d9:86:01:6b:a4:71:b3:74:b1:b3:7c:ba:7b:2e:a0:
2a:c3:c7:17:ca:40:91:59:1e:15:76:6d:77:b4:07:4d:37:ae:
c6:21:01:25:c8:70:c5:d7:bf:70:87:51:d1:63:2f:56:ec:cd:
88:ff:84:a0:c2:ff:82:1b:eb:83:26:30:4f:74:72:bd:a6:e3:
fe:de:c0:f7:46:46:10:b2:77:79:95:08:ad:9e:5f:a9:ac:b5:
c0:7b:f4:64:3e:ea:86:c5:b4:d0:7f:c8:5f:20:f0:df:d7:52:
d6:21:db:08:f8:83:d6:6f:ca:eb:3c:ea:75:cb:07:a5:e0:e8:
d5:d4:38:24:08:15:cd:1a:4f:db:ed:4f:67:ac:4e:47:96:ec:
b7:00:bb:02:8f:7a:26:81:4d:1b:58:ae:1c:c4:ca:1b:5a:0f:
6e:1c:40:d5:28:6b:ce:a7:be:88:b9:40:21:41:0c:b7:8d:55:
86:34:ca:e5:9a:72:23:4a:b5:9c:22:83:5a:74:7e:ea:66:ef:
33:c4:7f:4f:0c:4f:a8:17:af:60:59:ac:4d:75:83:a6:01:e3:
34:c0:29:c1:d1:c6:bf:58:5c:2e:c8:fa:34:ab:75:47:e5:fa:
02:cd:5e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:31 2025 by rpki-client