Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File: 4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier: NVLOjq2PEQ+pD+iHBoABIsRu97OLYbvh004NwfgubQ4=
Subject key identifier: 04:39:E4:A9:28:CC:97:83:B7:CB:1B:89:0A:43:83:40:C0:ED:41:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25FDE0FB9410CBCEB9BA7624BF39291FDE0D056D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fd:e0:fb:94:10:cb:ce:b9:ba:76:24:bf:39:29:1f:de:0d:05:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=bb02945ea552a0cfbca0168bdb5e7c7e47f552b2fcb7fa1cbb45274edfdfc3b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:47:54:0c:42:87:7e:fe:08:66:01:bb:90:
1b:61:67:cb:91:91:c9:00:a5:4d:88:12:6e:42:30:
f0:fa:36:6c:cb:1e:7a:c5:76:a3:c4:ab:6e:7b:dd:
5d:41:05:b9:2d:f6:6d:f3:38:b4:9e:83:79:7e:bc:
19:d2:cd:7e:26:99:9b:9e:3a:42:b1:87:07:cb:c2:
46:32:30:83:e4:69:47:cc:ae:ee:cd:14:af:3b:2d:
b9:c5:bd:14:77:39:8d:51:ff:fb:27:c9:f3:d4:9e:
ed:02:38:db:3d:02:a9:99:62:0b:97:a3:30:01:47:
23:60:29:b1:b6:87:2d:1f:f1:c5:1f:44:6f:81:47:
fb:db:81:39:0b:d1:58:c3:ba:f4:7d:71:d6:f1:35:
0e:f9:07:52:b7:29:a3:af:f2:ef:c6:89:35:4f:61:
b6:1a:3b:cb:09:d4:f2:e5:18:04:d8:5e:2d:64:4a:
f0:63:f8:67:52:30:c6:06:aa:9b:fb:13:33:5a:09:
61:d1:6e:aa:38:c1:b7:cf:6f:9d:b5:b0:4a:9a:20:
8c:c8:bb:6c:6b:a4:93:b3:bb:86:2d:35:9d:aa:3f:
2d:af:f5:81:a6:38:3c:8b:f5:84:47:7b:c9:20:90:
80:23:11:e4:13:3e:f0:d5:32:54:2b:86:cf:fd:1e:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:E4:A9:28:CC:97:83:B7:CB:1B:89:0A:43:83:40:C0:ED:41:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5080::/48
Signature Algorithm: sha256WithRSAEncryption
8b:e1:bf:48:b8:34:d2:c1:90:83:2e:f1:ca:f7:53:66:32:77:
69:20:45:01:84:93:ef:31:e9:05:f8:14:6d:a4:34:af:16:2e:
e5:dc:e3:6b:14:6b:9e:c2:22:6a:7f:ae:68:9f:99:ad:63:9b:
13:db:ed:62:a6:67:2c:92:75:2d:9a:e8:47:fd:e4:b5:7d:af:
32:23:42:88:fe:e3:53:49:12:5c:d5:51:00:43:05:bb:56:47:
26:c6:5a:2b:b8:01:fb:c7:c2:53:2f:8f:b8:17:3e:8b:f0:38:
39:53:b3:6c:ae:76:0c:60:48:98:dc:94:13:8e:09:61:4e:92:
2f:ca:e7:e6:0d:bf:10:a6:e8:21:8a:d8:71:5d:d8:f0:11:13:
72:f1:2e:e3:e5:68:27:cc:b6:72:19:5c:bd:d6:ae:ec:79:74:
08:ab:86:3c:bf:ce:3e:b8:12:b6:d5:21:a6:8e:81:e5:39:b7:
ae:de:a1:76:84:a4:8c:9a:71:9b:7c:05:c2:52:1d:ce:95:af:
5a:3d:b1:27:29:76:fa:44:33:f3:8c:30:4a:a6:24:7f:6e:b3:
ac:b9:59:09:d0:43:57:a3:19:98:88:ca:b3:8c:a0:21:b9:82:
a3:a3:c3:ca:0b:6f:d9:83:64:79:fa:aa:90:ff:9e:0c:22:7c:
2d:a1:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:06:03 2025 by rpki-client