Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
File: 5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa (raw, json)
Hash identifier: FZGk/ngXyBl1Uxw/JcAU5pHCE+ADjYG0oOWZBcLkAg4=
Subject key identifier: 6E:91:A2:26:F1:DC:D8:F6:8C:A7:B5:82:EB:49:BA:D7:58:C9:58:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13247B68AD9CB2214927811734935EA685E77F2A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d025:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:24:7b:68:ad:9c:b2:21:49:27:81:17:34:93:5e:a6:85:e7:7f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3f11448ebddadf1087becffac50d53318052eb1a07f25e66cb8eb3422d1dfea1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:4a:b8:3a:59:5c:e9:4f:b4:e2:73:6a:3f:
44:a6:44:5b:d2:44:a6:67:26:09:1a:cc:66:83:b4:
18:bf:96:49:a2:d8:01:75:22:4f:09:1f:c3:b9:0d:
3f:6a:ee:f0:46:ca:a6:cb:57:7d:a4:d8:3f:df:28:
c8:b9:a2:b4:d9:59:03:35:be:ee:90:9f:9b:ec:eb:
a2:fc:47:58:9a:d1:56:b2:f4:38:a2:7a:ef:08:c8:
65:26:9f:d1:a6:48:f5:cd:8e:58:20:99:e8:0e:66:
b0:5b:b9:44:fc:d0:88:38:8d:e7:85:d9:80:6a:83:
66:12:63:ac:e5:dc:b4:b2:2c:97:fe:6f:a1:0f:d9:
3c:24:c5:d6:5f:47:83:24:8d:74:2a:c8:c4:0e:3a:
27:5d:8e:61:26:27:07:16:27:a3:7e:98:af:80:73:
1e:fa:38:2e:16:ae:a9:97:e1:b6:42:7f:4b:7d:73:
dd:b2:23:73:44:37:bb:9d:0a:9a:71:04:cc:54:46:
94:a4:74:b7:c8:eb:7a:26:ba:d2:49:cb:b8:7d:ba:
19:50:cb:d7:13:d3:bc:f4:15:2d:59:01:26:96:48:
c4:6f:7c:dc:e3:a3:05:0f:28:91:4b:2a:0b:c8:4f:
1f:41:84:9b:7c:73:5e:9c:16:84:93:60:2f:9a:0e:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:91:A2:26:F1:DC:D8:F6:8C:A7:B5:82:EB:49:BA:D7:58:C9:58:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d025:1000::/36
Signature Algorithm: sha256WithRSAEncryption
7b:82:60:66:41:66:fe:7c:f7:cc:97:eb:c9:6a:c3:57:e2:08:
a6:fc:99:53:10:f9:01:0b:46:63:2f:40:d2:28:19:db:14:7b:
73:8d:0f:97:92:56:c4:e0:96:ba:a7:bb:cb:56:84:12:08:36:
c1:95:93:cd:9e:3f:a1:f6:e0:87:2d:34:45:b1:89:df:29:c6:
f9:93:43:be:de:e9:de:e2:45:3f:07:d7:c2:d2:f7:d0:26:2f:
79:e7:89:cc:3e:1c:aa:41:c5:cf:67:9e:1d:30:20:75:b1:e9:
93:fb:46:bb:21:c1:26:62:59:90:dc:8a:0d:25:ce:43:d1:39:
b6:3d:54:95:fb:3d:c5:1c:79:74:b2:88:74:92:cb:87:00:f1:
2f:00:e0:00:87:ec:c7:23:72:27:2c:08:70:85:70:d9:ad:0e:
b1:cd:a3:c6:eb:ab:5e:09:88:8e:a7:3d:de:e4:e2:45:29:ae:
df:4f:4e:a5:ee:65:6c:99:b2:8e:9e:0a:ee:c5:95:95:fb:03:
62:ab:a5:cc:99:0b:c4:dd:52:04:18:7d:35:58:8d:59:eb:73:
6f:82:f8:28:a2:61:d3:0d:ad:dc:10:f3:3f:12:0c:69:ef:65:
44:84:8e:6b:4d:65:d7:02:14:8c:12:f5:b1:82:e7:58:8f:ea:
cb:e6:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:39 2025 by rpki-client