Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/595250c3-e9f2-4e23-9779-87c47497f520.roa
File: 595250c3-e9f2-4e23-9779-87c47497f520.roa (raw, json)
Hash identifier: olMHV7OAyOvZFXEupCCyQq1jGoaCP/O3IFjUzEBzMys=
Subject key identifier: 53:81:A3:F2:81:A4:88:5E:EB:3A:EB:62:AC:4C:40:33:A8:59:0D:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1818B32F3F867778D5105C0DC924D6CE3A24176E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/595250c3-e9f2-4e23-9779-87c47497f520.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:18:b3:2f:3f:86:77:78:d5:10:5c:0d:c9:24:d6:ce:3a:24:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=e3d7b259c030c319526c8d0f4efa581ef224b66ff06547dc45d11d07a4eac3ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:80:f6:5e:f7:10:91:ab:5b:ad:62:47:79:
a7:36:85:6e:7b:b9:82:70:6f:82:54:d9:de:d7:07:
85:b0:19:d7:5b:40:b8:7f:ea:51:7d:21:1c:fa:04:
6d:18:fb:9c:68:47:59:33:df:ec:1e:73:a8:1b:92:
4e:c7:19:bd:89:3a:db:f9:2f:28:82:21:bd:e7:7c:
7e:79:6d:4c:1a:2c:2d:17:01:b3:b2:34:ed:de:b5:
3d:f0:2e:31:89:17:6c:e8:78:4d:0c:53:a9:c2:b9:
74:a6:65:65:79:16:72:c1:8d:0f:83:dc:87:9e:4e:
ff:36:71:80:2d:cc:c8:5e:b7:fa:02:1e:0c:41:c8:
87:e1:46:51:c6:09:75:3f:43:9b:db:e0:fd:ba:f4:
7b:46:27:7a:5b:33:97:0b:52:d0:5e:18:43:0d:14:
d9:9a:24:e6:bf:bf:11:93:06:af:6b:7a:4f:ab:f6:
a1:82:db:fb:53:3e:bb:aa:0e:40:72:d7:e6:38:88:
d2:63:a2:0f:ce:7c:2b:28:bf:a8:48:75:e1:6f:ae:
74:a4:90:d9:38:05:39:01:93:10:68:72:e5:8b:8e:
cd:5e:95:20:a9:2d:4c:10:0a:4a:33:a6:0c:90:55:
77:23:30:70:38:2c:46:39:7b:fa:f7:4e:38:02:62:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:A3:F2:81:A4:88:5E:EB:3A:EB:62:AC:4C:40:33:A8:59:0D:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/595250c3-e9f2-4e23-9779-87c47497f520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:5000::/40
Signature Algorithm: sha256WithRSAEncryption
81:b9:f1:78:26:2f:50:1f:c2:15:b8:c1:d1:f3:3a:77:9f:a2:
07:64:64:56:88:1c:42:6c:80:5f:4a:b0:e5:60:b3:74:3c:b4:
a7:04:41:f6:33:cf:7d:81:de:16:41:3b:14:bd:42:b4:15:44:
3e:fc:a8:bb:45:65:6c:e1:68:90:e6:ca:9f:9b:f4:7d:4e:5f:
4b:7a:d9:15:5f:2f:f3:62:b4:0f:10:49:b7:25:ed:18:86:55:
7f:be:a3:8c:01:ac:0f:a2:26:1b:5c:27:c9:29:90:4a:64:f0:
a5:ba:ec:3f:05:e4:e1:70:9d:dd:02:75:89:85:1e:52:f9:9b:
8e:58:83:eb:86:da:e7:55:93:ac:46:2e:71:a2:cb:0e:25:f4:
6d:8b:39:d0:26:46:9d:51:92:93:71:50:e1:0b:81:42:c7:30:
0f:ba:96:f7:31:79:c7:6b:1e:90:5d:95:79:37:a1:43:2c:2a:
96:1f:a8:39:b4:26:c0:41:bf:80:db:02:c1:01:3d:c6:0e:93:
3c:bf:21:5c:8a:fe:56:5b:e9:87:1c:e8:43:2b:32:2a:23:b3:
ca:3f:af:cd:0e:8b:32:a1:5c:b6:57:e6:be:b7:97:40:4d:a2:
9c:7d:c2:96:63:f5:1d:58:95:c2:78:eb:b8:cd:12:46:21:78:
dc:03:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:49 2025 by rpki-client