Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
File: 37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa (raw, json)
Hash identifier: HXV9hjRHP6ElFKEOL0LpdxlOwbgIh/NVBt6rVYJf9Yo=
Subject key identifier: 86:E8:BC:02:C9:4A:FE:3D:E5:79:24:8B:AC:11:A8:1F:04:8A:84:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E8D38D3F1F1EC13DB9B3ADDDB01A42F718BA737
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
Signing time: Thu 30 Jan 2025 00:00:00 +0000
ROA not before: Thu 30 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8d:38:d3:f1:f1:ec:13:db:9b:3a:dd:db:01:a4:2f:71:8b:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 30 00:00:00 2025 GMT
Not After : Mar 6 23:59:59 2025 GMT
Subject: serialNumber=39e51b7ad29f7994e324b23f170f3cc9c3fc9f21033f9ca7a9f9fea782e95b25, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:aa:3a:3f:fc:7a:55:52:e1:52:e3:92:f0:
99:c9:80:3b:e2:4c:0e:a0:24:f0:44:b9:37:8a:94:
0b:a6:c7:0d:ba:5b:f7:fa:1b:6a:35:5a:83:fa:c9:
82:31:17:94:6a:71:c4:73:a3:b3:67:bc:15:0b:03:
12:94:e9:01:52:14:4e:aa:5f:fd:bc:52:d2:cc:0a:
bc:c1:e8:9c:e3:e4:1f:ff:ca:55:36:a5:22:ea:32:
f2:9c:20:34:9b:b4:d0:00:89:0b:73:ba:46:05:cc:
98:b5:30:d2:b3:56:91:19:aa:05:51:42:63:4f:71:
5d:3d:bf:e5:d6:b1:69:cd:b6:63:82:eb:1f:1f:fa:
32:6a:df:74:6a:2a:21:06:d0:6a:d0:c8:fb:b6:ba:
80:65:6a:21:d5:ed:33:b5:80:a9:42:ec:e2:d3:fb:
eb:96:b6:51:6d:e5:82:fe:5d:f9:29:4e:f3:91:3b:
a9:e1:02:24:fe:b1:8e:80:13:ba:18:cd:82:67:d6:
6a:f1:7f:c2:e8:f6:fa:96:30:39:13:fb:9b:43:9b:
88:b6:bf:c7:51:b9:e7:50:bb:0a:a8:7e:08:57:1f:
a3:b9:65:85:25:11:63:a1:80:fc:57:03:0f:c7:ed:
56:37:d6:53:a9:75:d5:24:45:b6:24:05:10:48:c6:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:BC:02:C9:4A:FE:3D:E5:79:24:8B:AC:11:A8:1F:04:8A:84:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/48
Signature Algorithm: sha256WithRSAEncryption
97:9f:c1:8c:ff:f3:fd:cb:b5:f7:db:7c:43:f5:6a:66:4c:82:
91:38:8e:2f:ec:83:46:7c:4c:03:36:9d:c8:90:d8:7e:bb:53:
a3:c0:f3:95:ef:15:a2:db:cd:eb:c3:ac:f9:44:58:f8:87:77:
68:34:c3:18:6a:51:50:2d:57:c1:fe:c9:c4:69:1a:8f:56:73:
15:9b:23:8b:56:c6:83:58:cc:a5:09:e1:25:30:86:85:e9:ca:
ff:ae:3e:95:f6:ca:a3:62:76:f0:84:e4:ae:c0:63:07:61:41:
c9:18:98:88:da:43:17:b0:95:18:e5:6b:f8:1a:9f:65:42:2a:
89:7b:0f:b5:5d:ee:d6:1a:79:18:29:e6:13:fa:5a:c4:98:51:
44:9e:c8:73:57:0f:5c:db:c4:15:02:2d:f2:76:d5:a0:92:da:
8a:04:fe:a7:5b:a3:a6:cc:0d:0a:66:30:91:fd:ec:84:de:9c:
68:fc:e1:bd:e8:5f:68:77:1b:14:f2:6d:dd:c6:97:c7:9a:8c:
ca:c8:cb:db:db:ae:84:ac:fd:00:f4:ff:72:3f:52:a9:b7:dc:
7b:16:c9:ef:a1:0d:70:8c:5a:f4:37:b4:45:e7:63:85:f3:79:
bf:56:5a:5b:97:24:a5:c1:92:0a:f6:c4:b0:b2:bb:16:67:31:
24:a0:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:51 2025 by rpki-client