Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File: 5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier: 8jIAp8H/3G+6tLzS15XhcvttNx3jswNwycBbigu5WdM=
Subject key identifier: 0E:59:F9:96:00:52:6D:78:80:2A:49:BC:A0:4E:B3:16:CC:B3:D4:C1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0600AA7D439AB57ED1AD8935CE455D00EC7D5BD4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:00:aa:7d:43:9a:b5:7e:d1:ad:89:35:ce:45:5d:00:ec:7d:5b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6945d7b42c4eefe7a94aae6e838e1b38fa64a91f01fefbc324d7e1a3a0f766c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:50:53:1b:c9:c6:ed:03:ab:43:41:17:36:
13:1f:3e:be:d4:f5:69:2f:99:f2:6a:e5:1d:e4:49:
63:42:11:91:9e:a9:4d:da:83:d2:8b:04:3a:b3:7e:
e3:90:7f:99:d5:b6:81:f0:a3:62:4a:56:ff:10:d2:
6d:65:29:af:77:fd:73:4d:3c:a1:ed:0d:97:30:1e:
a5:9b:a6:21:e0:e6:5d:20:19:fe:d0:21:9a:4c:ba:
09:aa:43:eb:70:f9:b7:af:a0:e5:b9:7c:bb:26:58:
3b:43:e4:11:58:b6:9d:7b:55:10:bf:cd:79:80:b1:
c9:73:8c:c7:94:97:cb:25:9f:18:40:14:e4:c2:82:
ef:28:6b:ae:e2:39:56:b3:bb:09:49:5d:cb:ae:d1:
bc:1a:a8:b0:66:9a:c9:1c:7b:74:64:2f:d4:12:50:
1a:53:33:89:38:e8:c4:61:2c:6e:92:b7:7e:49:5b:
3d:32:4e:ec:2e:22:32:90:a0:28:86:c8:aa:7c:c4:
91:69:7f:6d:e1:e6:2c:ff:9e:b3:e8:d9:9d:59:57:
f0:e0:65:d5:a5:9e:ef:3e:3f:f6:4c:cc:f1:d0:d7:
f6:8e:b1:13:d6:df:b3:f1:f4:6c:47:27:79:10:c6:
5b:f7:a5:18:da:e6:17:80:07:f3:98:1b:e8:26:5f:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:F9:96:00:52:6D:78:80:2A:49:BC:A0:4E:B3:16:CC:B3:D4:C1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:c000::/40
Signature Algorithm: sha256WithRSAEncryption
af:bd:c6:af:a9:f4:fc:35:84:51:1a:30:e2:02:b3:ee:8c:00:
8a:c3:d5:53:c8:22:b2:3a:b1:79:af:75:cf:77:5d:8d:29:6a:
2d:3b:5a:89:cf:20:5b:88:76:e6:f0:85:45:df:c4:b6:ab:1d:
95:f6:73:5d:09:1b:50:cd:a9:b6:6c:99:2b:4d:2f:04:c4:d6:
9b:a4:1f:6f:38:dd:2a:e0:66:e4:10:86:f9:31:37:ed:f8:96:
e2:e9:98:e2:bc:cc:b0:10:2b:16:37:e8:86:07:9b:e9:ea:cd:
8e:08:2d:a6:26:7c:3a:dd:fb:a1:82:a2:b0:ee:83:da:61:52:
b9:b4:59:72:4e:e6:ba:01:df:2e:c6:e5:10:38:90:0e:e1:4f:
df:a6:b3:bf:63:f4:d5:c9:c7:f2:9f:8d:c2:b9:51:d1:89:c7:
fb:43:96:26:36:54:ae:d3:f6:70:19:bb:d3:5a:77:f4:6c:07:
69:99:02:a0:03:27:fd:24:e6:6d:20:5f:cc:a4:44:21:c2:8a:
c5:82:bd:2f:21:b1:5a:f1:51:ca:14:35:78:dc:ea:d5:c8:01:
ad:03:6a:e9:d8:f3:41:ad:c3:9a:b6:37:24:71:3d:5d:61:a5:
ef:d9:5f:9b:3c:34:35:61:88:2f:f2:1d:11:82:d5:58:a2:12:
ea:69:b9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:05 2025 by rpki-client