Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
File: 51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa (raw, json)
Hash identifier: Uh2eN/NmZUlHdHeYDWDY7pvrpzYEoZgpj1uFtErBnLs=
Subject key identifier: AF:23:69:5D:F6:92:22:DC:87:40:A1:BC:99:2D:45:DE:2F:43:09:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BD7AB8FCFBEDC4F9ABB5C23272F3F72C65BE0B0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d7:ab:8f:cf:be:dc:4f:9a:bb:5c:23:27:2f:3f:72:c6:5b:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=864d8776bc73490a69fe1cc7a414690da08806c9c71cd19886aa638232908458, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:83:44:01:50:15:a9:a3:da:b4:fe:5c:60:
0f:08:03:f0:02:90:0a:38:f3:8e:06:5d:a3:cc:18:
f9:c2:4a:d8:e3:22:12:f4:fe:86:50:9a:dd:48:e2:
37:fb:d2:c5:c6:70:1a:7f:c1:70:d5:87:93:71:6e:
7e:09:66:d0:35:cf:4d:8c:0c:3f:97:76:89:b0:34:
7e:02:f1:ef:d7:c5:ea:f3:7f:a1:15:83:60:a6:15:
3b:ae:8d:34:d2:b1:71:41:3b:7e:07:a3:61:f5:20:
dc:74:6e:c8:d6:12:c8:55:73:71:8d:ba:f4:1a:27:
40:99:5e:24:14:8e:36:04:1d:b3:9d:ba:b1:20:fc:
9c:9b:c1:ef:4d:3c:7a:99:2d:b5:34:8c:f7:b1:dc:
ce:a4:2f:f0:12:cd:05:4a:10:07:bb:e3:d7:1f:3e:
1f:05:7a:b9:38:13:dc:63:72:0f:51:f2:2f:40:0e:
87:be:fc:21:a4:2c:f1:26:46:56:6b:9e:2f:18:aa:
44:1b:cd:2b:09:f3:5d:8f:08:cf:82:37:a9:82:db:
c6:cb:1b:f2:b7:02:db:94:58:cc:c5:e2:49:96:2a:
35:a1:1b:96:3e:f9:ce:24:13:ec:12:17:79:82:da:
a4:f5:a0:98:32:4d:04:f7:d3:f8:7f:c4:ba:bc:a6:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:69:5D:F6:92:22:DC:87:40:A1:BC:99:2D:45:DE:2F:43:09:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e7:c1:a9:f8:f5:1e:95:98:bd:e3:54:fa:e5:83:29:be:b2:
ba:de:36:a1:35:ac:21:65:e5:04:71:54:03:4c:94:ad:3e:20:
79:7b:07:0f:b3:88:1a:dd:bc:c1:b1:21:d2:fa:ac:00:ec:a0:
af:9d:f1:a2:50:6e:eb:53:47:e2:9c:61:bd:c2:16:3c:23:38:
f4:88:45:f3:9c:9d:ca:61:e6:bc:be:98:7e:c0:0e:2c:4a:17:
c4:6c:71:44:fc:fe:95:f0:fa:2a:8b:91:9a:85:d2:fb:be:19:
d2:4b:c8:2b:7e:7f:ce:bb:87:ce:cd:9d:fc:9b:4c:9e:02:22:
69:a1:02:d0:42:5b:ee:98:83:6a:40:4d:51:f6:ca:91:94:d6:
4d:57:32:98:57:9e:9c:3b:2d:91:70:51:f8:a8:2a:18:c4:ce:
f0:56:61:ba:8a:da:ea:59:7b:ba:99:05:a4:f8:4a:ab:30:ac:
46:89:6a:99:db:b9:d9:e4:1e:76:a5:f6:fb:b7:d4:2f:f8:eb:
77:bc:38:d7:4c:78:42:a3:e2:6e:f6:d6:b4:84:bd:4b:a3:8a:
2c:1d:7c:f5:de:98:ed:d8:c1:03:56:ab:31:7c:b2:25:cf:72:
81:12:95:64:ce:e8:ac:eb:86:0c:76:46:b9:95:94:1a:f2:49:
d8:1f:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:41 2025 by rpki-client