Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
File: 4aa20760-fb28-4393-bec8-9ffb467f03e4.roa (raw, json)
Hash identifier: rgmACMVBXpgsR1vxJuO6sW3vFBP1TPJBoDM7sm8eu6c=
Subject key identifier: CF:7D:19:17:C5:A4:C7:8F:86:2B:39:70:D8:0B:4D:51:E9:AD:C8:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 072F56F0B717CF43D791DCDA406C1B705318CBDC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2f:56:f0:b7:17:cf:43:d7:91:dc:da:40:6c:1b:70:53:18:cb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=0148cd64b3ae742f886c0bb9e576544d1db439f29d1763bb96727bb263dc2c43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:7e:cb:dc:bb:51:7c:5a:0a:5d:92:b1:4b:
e1:b4:54:ad:4f:4e:7d:e9:29:91:80:18:ac:bc:d9:
8f:43:e8:8b:2d:fb:2e:32:1c:60:38:4a:b9:2c:68:
2e:d8:2a:1f:ff:e2:df:ac:75:e5:f2:56:d2:07:60:
60:0e:15:27:7a:f2:90:f3:32:fa:44:a2:9b:ff:74:
98:55:64:55:6a:c7:4a:b6:17:c8:84:60:86:ac:08:
d5:35:3b:e2:8c:e8:e8:1e:5c:d9:c0:0e:86:9c:a9:
0e:12:a9:46:8b:30:95:4c:b1:0c:44:ef:0d:ed:11:
b0:54:28:09:4d:dc:2d:43:c6:ed:f7:1e:b9:3d:56:
3b:41:24:aa:d6:b2:44:ec:74:18:6d:7e:5f:61:55:
d4:8f:22:99:0d:8b:4f:63:1c:82:c1:82:5f:01:2d:
31:84:5a:20:e0:28:48:b9:52:7e:0f:a9:96:a6:ef:
9b:4f:59:ef:07:6c:59:77:03:5f:13:57:81:ff:ff:
3f:f1:72:a4:65:4d:7d:c9:80:49:8f:6e:d7:d5:6e:
85:89:50:89:7d:f5:b3:ef:31:01:e9:25:59:67:7b:
4c:64:2e:cd:32:33:cc:54:82:b0:71:d8:e5:03:20:
cd:92:2f:89:e9:1c:e6:dc:61:a7:ed:58:b3:46:86:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:19:17:C5:A4:C7:8F:86:2B:39:70:D8:0B:4D:51:E9:AD:C8:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:c5:cb:15:1e:cf:19:e8:d5:ff:9a:c0:d9:89:13:82:1c:ae:
5f:c5:29:a2:61:02:90:8c:8f:24:cb:60:90:fd:06:6c:1e:97:
61:cd:ec:75:d6:7a:14:bc:b6:6e:6b:6f:e9:af:84:59:05:fa:
6d:f1:a7:66:c3:e1:49:78:2a:a6:38:82:dd:71:c0:c4:0f:4b:
94:a1:b8:a7:69:d2:63:81:b3:d4:65:ec:79:46:a9:b3:32:87:
07:48:e7:97:a4:8b:fa:dc:56:65:fb:3c:5a:1e:91:e3:84:45:
a5:08:3e:9b:2e:64:bd:5e:c0:f5:5d:ad:0b:c6:68:14:65:83:
c3:c7:c5:2e:3c:d7:63:7d:64:5b:6e:62:c6:03:88:f3:da:bc:
ab:cb:85:03:3a:03:dd:d8:8a:41:8a:3b:37:12:12:fa:c2:5b:
96:7c:74:6d:51:9b:89:7d:75:84:5c:11:0d:26:a7:5d:e3:b8:
4d:5d:04:fd:1a:38:11:0a:c2:49:34:86:ef:4b:c5:90:fc:31:
39:a5:3b:36:c8:56:5d:8d:26:96:a8:1e:de:d2:5c:85:90:a9:
55:85:c0:b8:ea:7a:91:9c:53:ca:06:45:92:7e:85:44:60:ff:
c9:8a:f8:31:88:3d:e3:4d:80:6c:81:29:e7:59:a2:01:c2:42:
0c:e9:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:19 2025 by rpki-client