Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
File: 5836d090-8999-43ab-a38c-f63a0e829c0b.roa (raw, json)
Hash identifier: RSS1oRvDaIgLXujbtuSNtu88tORyYerxjLOCtJ/aCNo=
Subject key identifier: 97:58:26:7C:9F:FE:F3:DE:A4:0C:A8:8A:78:2D:EB:E9:36:01:84:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61835035DB19B8540BBA38247240BD745A136C6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:83:50:35:db:19:b8:54:0b:ba:38:24:72:40:bd:74:5a:13:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=20db0169660571bfd292a803927529b1d55808ea50ee3868c78a7e760555643c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:ee:26:ca:e0:de:7c:e2:1a:e4:17:3a:26:
38:60:eb:ca:43:cb:88:d2:f5:a5:b9:d8:13:19:d8:
c1:7b:00:42:3a:c9:7c:46:ba:82:38:ae:3e:70:ad:
fc:19:29:ae:da:59:68:68:45:f8:f8:9f:d0:9b:e6:
5d:0b:80:48:b9:2c:a8:53:98:ed:fa:09:4f:36:56:
ac:a0:2a:3e:ae:17:cb:d9:8f:ea:38:b3:56:77:7e:
5a:83:db:88:fc:a7:e1:a2:c1:2b:8f:57:be:81:09:
2b:b2:53:9b:74:7e:7a:25:9e:57:8b:44:5b:c9:37:
62:41:58:f9:9e:ee:fe:e8:45:73:89:21:82:b2:3f:
d8:98:2b:dc:6c:c3:40:ca:05:0c:8a:f8:b4:17:f9:
dd:be:c8:b5:51:a3:e1:65:67:52:4e:be:f9:ae:bc:
84:4f:ad:93:e9:93:ab:2e:a3:5e:73:b8:29:48:37:
c2:7c:da:37:6c:db:ae:90:fe:1e:a2:58:39:c0:65:
1d:1c:4c:da:12:30:f5:40:b6:ea:8e:0d:1c:fd:ca:
09:0c:c7:ae:4a:34:b8:06:a2:72:d1:2f:81:7e:68:
dd:b5:9f:ca:80:98:e8:ec:a7:36:28:11:1f:8a:66:
98:92:72:39:76:8d:86:bd:cf:2f:94:6f:13:c4:3d:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:26:7C:9F:FE:F3:DE:A4:0C:A8:8A:78:2D:EB:E9:36:01:84:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
74:cf:29:ca:7c:cc:38:f3:dc:62:bb:f2:65:79:9f:04:ca:43:
cf:ab:2b:c0:c4:46:c0:47:7e:8e:ee:c3:a8:cf:70:ef:cd:b2:
ec:16:4e:7a:48:d8:29:b3:7d:fb:e0:93:15:a1:17:65:33:d5:
1c:60:f5:05:d8:be:15:58:da:da:09:f5:f8:49:cf:df:39:30:
62:6d:5d:3d:3b:5b:9a:07:55:07:78:ab:b7:41:3a:6e:ae:4f:
05:d3:16:dc:52:3b:a2:0d:98:8c:70:a8:4d:56:88:84:88:84:
de:c7:94:16:5e:00:17:19:d3:9c:af:d9:31:94:80:38:f4:b7:
36:84:18:0a:0c:45:2e:16:c5:4b:02:41:eb:a8:22:e5:8f:2a:
80:58:60:d9:18:a2:82:5a:0c:62:bf:9f:a1:95:4b:93:79:20:
51:1a:6f:c1:2e:ce:6d:3c:60:5a:41:e2:34:77:a7:cc:4d:3f:
f2:12:cb:8f:f7:f9:2d:88:a0:c2:cc:90:e9:a8:7a:5a:0f:46:
30:44:45:fb:27:61:12:63:1b:2e:0e:5f:73:77:06:71:4f:b5:
49:29:2c:e9:dd:8f:03:2c:7c:d9:c7:ef:c9:bb:b4:ab:3f:c4:
39:0d:a7:94:40:dd:e2:9a:4d:3f:b8:eb:79:c2:9f:00:4a:7c:
ab:bc:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:45 2025 by rpki-client