Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/424c40d4-9e1c-4cf2-a7bd-10475b0c2837.roa
File: 424c40d4-9e1c-4cf2-a7bd-10475b0c2837.roa (raw, json)
Hash identifier: A3y6qe3D49GIDrjY4ham4wIYF3qULj4ZwcVKeX4XYlw=
Subject key identifier: FD:3A:28:D4:89:44:24:26:58:35:9F:81:9E:77:5B:B3:75:42:F0:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CBD18F3850E7AADBE1C1F6CF1FA50EA5BC438E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/424c40d4-9e1c-4cf2-a7bd-10475b0c2837.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:9040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bd:18:f3:85:0e:7a:ad:be:1c:1f:6c:f1:fa:50:ea:5b:c4:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=12548903766086317f5cbcc419f909529edafd709e8d19e1a4b5e03447a2b9b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:92:57:f4:3b:7c:01:22:58:14:9d:ea:ed:
8e:07:e6:50:48:e0:09:b1:f7:2e:fc:6d:53:48:92:
d1:25:65:11:06:6b:29:30:f3:84:e3:b8:24:f4:67:
f1:77:dc:fe:63:09:d3:22:78:e8:d0:c3:e8:06:85:
89:c0:4b:85:5d:9b:ee:b4:15:de:fe:42:03:29:ff:
77:64:8c:9c:27:f2:af:92:35:a1:0a:ed:e9:7b:bf:
3c:dd:f1:7e:70:ae:f2:f1:8e:54:37:47:35:79:d9:
31:b4:8e:01:91:b8:33:09:41:68:ac:c0:be:ef:2e:
39:2a:c5:9b:10:b4:5e:07:0c:74:df:9a:f1:99:21:
d1:8e:44:73:ef:d0:66:6d:07:cc:66:96:7b:7f:a4:
97:d5:b5:95:6b:6a:f6:a0:d6:01:07:c8:5f:15:1f:
86:64:58:5b:f2:9a:e3:d9:aa:f7:4b:fa:52:68:97:
20:40:21:72:71:86:0b:dc:ba:94:2c:1a:1d:4c:74:
2a:af:61:5e:76:5d:24:b5:61:af:e0:26:38:1f:88:
5e:f3:58:68:15:5a:f5:fe:b1:74:a5:fc:79:00:11:
58:aa:27:a5:10:22:4e:49:50:33:c0:27:07:d0:94:
0d:af:7b:17:c6:98:ac:d5:57:5d:5c:68:f0:4c:0b:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:28:D4:89:44:24:26:58:35:9F:81:9E:77:5B:B3:75:42:F0:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/424c40d4-9e1c-4cf2-a7bd-10475b0c2837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:9040::/46
Signature Algorithm: sha256WithRSAEncryption
4e:54:50:01:c5:5b:8c:b5:1a:5e:ba:e8:c5:7b:4b:d1:04:78:
a3:c8:e3:3c:6d:84:53:67:97:57:d4:20:ed:fb:73:82:00:8d:
6d:ad:75:73:9c:a4:35:09:f6:81:49:8a:6f:65:46:82:df:09:
17:2f:df:9e:e8:24:e4:4b:29:6f:9d:c5:88:f9:cf:a8:3a:07:
8f:46:9f:0e:16:05:a9:4b:2f:98:09:07:92:86:8c:75:37:e6:
ca:d7:9a:4f:5a:e0:fa:af:d0:97:f4:58:87:df:95:5c:b4:b9:
44:2b:81:66:c7:c2:90:61:09:fd:b3:87:1e:04:2d:3b:96:ca:
a5:55:ca:f2:12:62:54:4e:28:6a:52:8c:ed:41:ae:03:7f:c3:
17:c4:7b:96:9e:ff:64:92:32:64:40:77:de:95:b2:fb:05:41:
01:c2:6e:04:16:7e:4e:85:1c:81:67:f2:11:1e:2f:2c:07:f2:
00:e8:9f:02:46:e2:a8:63:ea:dc:53:08:f6:6e:82:01:a9:0e:
55:c5:8e:1d:e5:94:21:a8:32:bc:67:16:91:01:ce:c2:46:b2:
49:03:8f:55:a9:2c:3c:4b:5a:3f:ba:ca:22:25:be:3d:b2:b1:
a4:d9:98:25:22:69:56:8e:0d:aa:9f:68:27:f7:47:97:57:d6:
3a:fb:e8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:54:09 2025 by rpki-client