Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
File: 4dc2c958-c749-4f2f-a83c-b419f7f45487.roa (raw, json)
Hash identifier: vzeSKWAcXUTtOThaKOk/rSX0W5E4s3vWLgGx+2z650A=
Subject key identifier: 28:EB:BA:33:BB:0E:AC:61:F4:A7:E8:05:32:1C:E9:A7:DB:1A:A5:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23D1F63FF7C9285594F82929093B5654268E2754
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d1:f6:3f:f7:c9:28:55:94:f8:29:29:09:3b:56:54:26:8e:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d6171c75779ce93adf3b449d92562018bb3c6136b185f40ec46a82f28fe808cd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:35:f2:be:ee:1f:17:4c:5c:8e:3f:d6:22:
b5:f5:16:1c:46:ee:ef:08:5a:80:d1:01:b2:db:75:
f9:c1:c0:38:b5:9b:87:f5:0f:ea:b9:8f:e4:72:78:
29:96:6b:f1:f1:13:41:59:d3:3c:88:3b:16:40:46:
02:68:8f:ac:c3:fd:f5:87:99:27:f8:e9:ca:9d:02:
7a:6d:0c:b0:8d:85:62:f2:c5:b7:c2:a6:84:34:56:
46:6e:d9:ae:9c:1a:14:2b:5b:9b:85:f3:78:65:ef:
33:76:4a:ad:1c:c2:24:39:33:8c:93:76:b5:e3:48:
6f:b7:cc:45:8d:64:80:e5:c1:84:ba:61:b2:8c:50:
08:75:6f:a6:76:34:a2:57:46:7f:46:3f:57:c6:cf:
dd:d3:f6:80:73:cd:b5:83:6d:2a:10:f1:e4:a7:48:
59:79:1e:4c:3a:c6:84:5e:2b:ac:66:6f:f8:19:54:
a4:95:80:31:fc:19:a2:61:86:7d:e5:7f:91:e4:a1:
43:9d:ff:64:b6:d4:53:7f:59:52:11:59:63:a8:03:
39:09:3f:60:46:b1:cc:49:e8:71:5c:07:f7:d6:2d:
16:f2:4f:21:17:25:4a:46:e9:6a:59:be:58:bf:4b:
08:e8:c5:b4:ab:28:4b:a6:01:dd:77:d0:e3:9b:6b:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:BA:33:BB:0E:AC:61:F4:A7:E8:05:32:1C:E9:A7:DB:1A:A5:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:fc:39:0c:e5:c2:e5:58:ba:43:08:22:2b:2c:d2:f3:24:c7:
19:92:a6:83:a3:d4:d1:46:3b:a4:f4:3a:82:84:ac:da:9e:35:
99:19:14:61:74:b5:d0:d0:6f:bb:31:f1:60:fa:78:27:9f:45:
22:4e:40:87:2f:54:28:d3:7a:5c:01:68:a4:80:c4:4e:89:9b:
e7:2c:73:5d:e5:4f:ad:b0:37:09:95:78:68:7f:9f:3d:9b:85:
a1:bf:5b:ee:13:69:99:f1:e8:61:80:01:18:7d:c1:29:be:41:
36:75:82:bc:8e:a3:53:42:f2:f6:b1:f8:b8:02:21:9d:02:eb:
d9:0a:bb:8d:5f:b6:b4:8a:5e:6b:57:76:fe:93:24:46:ad:21:
e9:3f:71:a9:8c:98:64:ce:f9:db:80:8b:df:6c:44:07:61:92:
fe:e4:f8:ba:7e:87:e9:5a:2d:4e:31:06:05:ad:05:65:74:b1:
71:ae:2d:b6:ff:22:98:da:68:64:5c:80:d4:44:4c:5f:40:96:
15:84:82:4f:49:16:a2:31:52:9b:fa:a6:ab:9a:7d:14:7e:b3:
00:8a:f0:30:52:dc:a5:f9:66:5e:40:18:86:6b:cd:44:e9:46:
63:93:00:0c:ef:86:ff:54:ae:94:22:f0:f8:b0:08:34:41:aa:
ef:d8:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:42:59 2025 by rpki-client