Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa
File: 52b24640-f60c-42e4-9476-345e951e2387.roa (raw, json)
Hash identifier: wdQr3Ho5K6FaRcIZnxOa/iVoKhA0TWDxc0MbX/KR7Lg=
Subject key identifier: 4B:5E:9C:18:40:AD:31:45:E8:92:98:A8:DF:20:C6:DF:6D:4D:72:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7886C21E10A74C49D68FA9A04935C36F940A2B95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:86:c2:1e:10:a7:4c:49:d6:8f:a9:a0:49:35:c3:6f:94:0a:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=bdf4ae58898d11e22a412f4f2337bdebb3b9190a1eb77c80878d4fd8d05e1a10, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:19:00:9c:81:84:c2:04:7b:a8:bf:d8:fe:
c3:76:5d:0c:ee:29:d5:c5:94:49:b9:1f:0c:30:89:
38:b6:ba:00:a5:52:cf:5f:e5:72:94:bc:40:cd:61:
b5:40:43:4b:83:73:04:e8:1c:d6:da:6e:ee:6e:5d:
cb:6b:7f:c6:6e:18:73:8e:42:8e:5a:f4:eb:e2:86:
fe:b3:fc:d2:88:a1:25:43:f9:9c:a2:92:1e:52:7e:
18:05:dd:29:2f:af:bd:02:0e:c6:87:52:57:67:07:
a2:79:26:75:5e:c9:1c:b4:b0:7b:6d:8e:0b:99:5c:
ab:c5:f9:fc:5d:83:ae:fa:53:f2:47:38:7d:21:f4:
33:4f:d1:b4:67:4d:ba:25:4f:75:31:7c:02:fd:dc:
fb:a7:59:fc:e4:c9:a3:6f:40:6b:e4:25:79:15:25:
22:ec:81:96:72:96:3f:8e:95:71:de:b1:ed:da:1c:
28:07:49:9b:27:63:19:ca:65:a3:c5:f0:f2:84:62:
48:0a:cf:4b:65:02:42:7f:0a:5d:65:85:71:17:f9:
dc:f3:5f:ba:dc:d2:17:9b:46:23:a5:83:e1:77:1d:
98:44:15:62:85:dd:ff:b7:dd:8f:76:47:b7:16:c0:
73:9b:31:d5:67:71:af:df:0f:74:ae:ba:16:bc:c5:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:9C:18:40:AD:31:45:E8:92:98:A8:DF:20:C6:DF:6D:4D:72:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5040::/48
Signature Algorithm: sha256WithRSAEncryption
11:03:fc:ba:b3:49:6c:a4:c9:b2:4b:bd:7c:5f:50:a8:1f:16:
26:91:c8:b7:a8:ab:d0:b6:04:02:82:ef:f6:1a:35:2a:aa:3c:
bb:47:56:ef:79:54:c9:a2:85:7c:70:a7:11:4d:86:a8:03:f7:
4d:8c:a3:63:78:5d:47:21:8e:10:e5:9f:0e:2e:d1:9d:34:d9:
58:9c:dc:0b:17:30:75:f4:1f:6c:3c:12:47:df:73:c3:69:ee:
7b:99:5f:b9:30:38:4b:ec:eb:a7:95:dc:cf:7e:1c:2b:12:ab:
55:5d:59:3c:86:c2:28:a1:7d:21:8d:34:fd:e8:0f:3c:ef:a0:
d6:be:46:02:49:24:6b:5e:8f:7f:fb:53:00:ae:32:06:dd:8d:
0b:12:de:77:c1:6b:ea:e0:64:be:e9:54:52:cb:f0:04:75:71:
b8:dc:7e:fa:a9:6c:ee:9a:73:b3:5f:1b:bb:2e:0a:ed:f9:60:
51:a1:2a:72:a3:ee:9f:9a:09:54:c4:74:94:a9:0a:6f:d8:bc:
46:29:bf:bd:eb:75:6d:77:d1:a1:31:47:fe:4d:ae:eb:c3:45:
b3:de:33:d2:cd:99:00:59:19:8c:97:91:db:41:d3:7a:ad:3d:
9c:1e:38:d0:da:2a:21:cd:ba:06:c8:28:00:ea:db:2a:13:38:
49:a4:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:04 2025 by rpki-client