Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
File: 4b43f183-cd0a-4862-a7f0-bf7122100edb.roa (raw, json)
Hash identifier: ueChS4tAlDBrcqt6hcOmTlPtB7QJXvwl/E1DbK7EU1k=
Subject key identifier: 9C:74:A9:FA:7D:90:07:C1:DB:3B:C7:68:A7:A2:57:0B:5F:36:E1:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28E5C7E4316EF8D95DFA5E6A7051001E5244BE69
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e5:c7:e4:31:6e:f8:d9:5d:fa:5e:6a:70:51:00:1e:52:44:be:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d6e196af41829b4d8d6658f7dc3be286150d282ae073c8465d0271b282feb368, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:27:3d:cd:ae:f4:74:44:7d:dc:b5:ed:ad:
d6:2c:b9:d1:cd:ab:a9:29:5c:a4:ad:71:4e:8a:87:
9c:47:30:fd:11:40:65:ae:48:f8:7a:f8:e9:79:34:
3f:8c:eb:73:1c:bd:e3:0d:fa:27:ab:96:c2:19:57:
58:72:ce:b1:4e:d6:b3:e8:66:9b:74:c2:84:42:60:
42:27:5e:4e:c0:28:3e:c7:da:57:fc:16:c5:63:5d:
71:56:30:df:8c:a1:d1:43:0c:1d:60:48:8e:3b:b6:
80:76:64:fd:42:24:cc:14:30:23:a3:8f:87:59:e8:
db:9f:49:d5:32:bc:ec:78:e3:7a:d0:dc:24:74:ba:
94:ee:de:e9:df:61:4a:74:2a:3a:fa:45:bf:93:9e:
18:22:0b:4e:4f:9a:86:ab:51:0e:00:3f:24:85:40:
85:96:99:84:03:48:e9:a2:e5:cd:d4:3e:b2:06:c7:
41:70:72:6f:b6:82:78:47:0f:5e:09:b4:a0:8e:2f:
80:f2:7c:62:f0:11:a1:51:b9:94:fb:95:39:f4:7e:
b9:43:b8:13:37:fe:71:b7:7c:cd:ca:09:de:04:1f:
6d:84:ec:72:3d:f9:bd:c4:7c:1a:12:78:ce:ac:bd:
b6:83:66:37:91:e5:8f:44:98:66:fc:b1:c0:b7:d7:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:74:A9:FA:7D:90:07:C1:DB:3B:C7:68:A7:A2:57:0B:5F:36:E1:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:c00::/38
Signature Algorithm: sha256WithRSAEncryption
0a:36:bc:ea:65:23:0f:05:3e:a1:f1:44:5e:a6:2a:77:2f:0e:
65:06:a6:9b:ec:77:d0:33:f2:7d:60:e4:1b:9d:80:94:2d:64:
a5:15:cd:e7:08:6a:68:38:7a:40:fc:15:99:85:af:25:9f:03:
c2:86:91:36:36:4b:ba:af:49:65:fa:96:ab:d6:02:25:89:2d:
69:83:51:1a:19:a0:ff:d6:95:dc:a9:60:70:70:ea:2b:05:fb:
c3:ea:78:44:fb:9c:fa:b0:de:bf:0b:2b:32:f9:03:fb:c8:55:
a8:00:53:9d:fc:29:28:e4:df:ad:72:d7:f1:30:fd:26:72:0a:
c8:10:f9:1e:3d:a4:0a:6c:03:df:b4:77:23:ac:81:84:60:d7:
6f:f0:34:89:ca:f1:8a:17:98:0f:1f:66:39:97:fd:0f:25:f9:
53:df:ce:4c:7b:b6:b3:ea:e9:10:51:20:d2:7a:27:44:5e:f8:
22:df:ab:eb:7c:29:a4:21:38:65:1f:d8:ce:12:33:4a:4c:a5:
8e:24:ad:5b:bf:82:1d:1e:a7:50:73:2e:c3:11:15:23:ea:ae:
5f:ab:ad:6a:ae:1b:f4:8f:26:c0:2c:3a:a2:22:db:4b:5f:b7:
5c:fc:8c:06:d1:47:00:77:67:7b:05:83:18:e5:8b:4a:e6:a3:
62:8a:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:43 2025 by rpki-client