Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4eb3ede4-5a28-4b3e-a67e-2345fe7d98b8.roa
File: 4eb3ede4-5a28-4b3e-a67e-2345fe7d98b8.roa (raw, json)
Hash identifier: i5RV1xB9LtqSl93LXDGi/XM7knQt530k5JXDW9FgrRo=
Subject key identifier: DD:E8:68:EE:7B:C7:F4:CA:9C:A0:F0:61:8B:CB:A0:DA:13:69:CB:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26AD78EE72CBBA048765D56E8F41F4E904183FA5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4eb3ede4-5a28-4b3e-a67e-2345fe7d98b8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:50c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ad:78:ee:72:cb:ba:04:87:65:d5:6e:8f:41:f4:e9:04:18:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=06def2490fb0861c0ec994cd3ab72020389c38a154aaa28275272c70ffae0743, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:77:a6:e7:97:a1:45:ff:7b:75:76:b1:de:
25:5d:ea:78:b2:be:50:52:37:f5:c4:85:4d:fb:2b:
05:db:9a:31:82:67:71:1e:fa:63:78:8e:5c:a8:8b:
ec:a2:8d:02:1c:50:b7:9c:7a:9c:79:f2:69:60:48:
85:41:8e:d6:cf:a6:4e:da:b8:bc:c9:59:f0:34:26:
6f:48:82:72:aa:12:78:d1:ba:a7:b7:ef:d0:52:64:
54:c2:3b:88:be:fb:d4:af:7d:16:30:00:3d:fc:06:
ab:40:5d:8d:dd:9a:37:d3:09:0b:12:44:6d:bd:ea:
2c:f1:25:3c:24:cb:3c:b2:3b:65:d5:9e:77:82:aa:
83:d9:06:50:29:7b:0a:c5:20:02:68:2d:6c:dd:38:
62:e9:87:1f:9e:55:01:1e:f0:03:8e:7c:18:19:8b:
a7:17:d3:c3:f9:3e:8f:29:be:d1:f9:a5:ee:77:fa:
f3:30:53:c9:9a:7f:6a:9b:c1:9c:29:f5:90:e7:19:
30:02:47:c5:17:e6:87:1a:32:f7:ee:9c:03:2f:d2:
2e:90:d5:af:00:c3:a1:85:d1:f5:fc:a9:8d:7b:aa:
49:88:f1:f3:71:ce:d5:54:b2:4c:cd:8d:ed:ab:7c:
3f:41:f2:db:d3:9d:d3:8b:75:4e:e2:4f:63:e1:5e:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E8:68:EE:7B:C7:F4:CA:9C:A0:F0:61:8B:CB:A0:DA:13:69:CB:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4eb3ede4-5a28-4b3e-a67e-2345fe7d98b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ab:9f:0b:a5:d1:ac:39:cd:b6:ae:69:6f:a6:ca:80:87:10:
86:84:f3:d9:e7:40:d5:35:83:f6:ef:65:5a:52:e8:94:d4:ac:
44:58:79:15:7d:d0:55:38:57:c8:5e:c5:c0:f0:e0:56:92:1c:
19:4d:05:3f:dc:48:35:df:c8:e2:2f:b3:ce:b2:f7:fe:3d:18:
51:69:f7:67:c1:83:41:d2:e2:8e:0b:68:2e:6e:e3:db:d0:a7:
fd:95:db:69:e2:96:6a:73:4f:1a:1f:4a:1d:08:63:e0:3f:24:
15:40:ac:dd:a9:26:e1:6c:ec:46:e1:51:44:75:c5:14:37:6e:
77:97:41:fd:71:1c:0f:5c:ab:98:3e:b0:8c:25:07:1d:a2:a6:
86:38:62:31:70:31:03:51:b5:ad:2c:e1:50:01:ea:22:02:ea:
65:0b:37:36:01:34:99:30:26:6e:ea:97:8f:e0:55:fb:c7:53:
e0:91:d8:7c:5e:65:74:f3:c4:d8:92:44:c6:e0:9c:41:a2:3b:
e1:ea:0f:89:7d:04:3c:8a:73:83:e9:58:86:51:0e:2d:71:28:
53:4e:76:da:56:13:76:e8:78:c2:c8:70:22:c0:da:64:1c:09:
d5:43:ef:f8:33:da:4c:72:12:bb:05:4c:85:22:48:4a:b9:01:
fb:ef:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:57 2025 by rpki-client