Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa
File: 5c829516-8640-4a9a-a2b3-cfababf09faa.roa (raw, json)
Hash identifier: ttDbxhjAmVUZ5ZXX8wRKVIl0wU29RFGQkWpKucJOxyw=
Subject key identifier: A5:02:00:CA:BE:FA:A9:64:A7:11:48:57:40:8C:DD:CC:EC:14:52:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EF85858BF9240866ADCD0B6BD8D98D689977D85
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f8:58:58:bf:92:40:86:6a:dc:d0:b6:bd:8d:98:d6:89:97:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c16be0f9990300c9522f805418938fd161f57b8867a48913d4818789c8a18a86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:52:ac:b7:41:3d:29:8d:0b:58:d0:76:a7:
4a:bf:ff:b2:cd:fd:07:47:d8:aa:48:f3:f7:64:33:
56:6a:2e:17:96:2e:f1:9e:fa:f4:82:c3:12:f2:60:
72:b6:d9:8c:07:c5:f5:dc:87:83:01:42:49:e8:02:
04:06:ed:b4:bc:26:da:26:3a:9d:53:2e:d4:09:28:
84:4f:f9:01:7e:a4:33:14:7e:23:f8:08:d4:b1:af:
26:da:16:c2:4c:df:c5:bf:bf:6f:91:04:b2:a8:47:
a9:68:4f:8f:1c:2a:da:70:74:18:7c:c6:81:68:38:
6a:85:22:d8:88:06:66:02:a4:21:b1:1f:7e:70:10:
7d:32:eb:8b:aa:fa:46:df:c1:82:8a:17:fc:a9:c1:
39:22:60:ae:5c:e0:07:31:7d:8b:d7:1a:da:4b:7d:
50:a1:92:3f:21:ae:4c:bf:a2:d7:52:79:26:1f:1e:
df:a7:dc:74:dc:fd:ff:17:72:8c:03:a8:6d:e6:07:
74:45:c1:6f:92:a8:d8:73:bb:7a:58:a9:c4:09:c3:
ce:c3:81:ec:ae:9c:46:ad:1a:0c:84:18:c9:93:6b:
f1:86:16:71:01:4f:60:60:96:16:03:2a:8e:50:47:
c7:1a:d5:ed:bc:c0:67:53:74:e6:e4:b8:35:cf:c5:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:02:00:CA:BE:FA:A9:64:A7:11:48:57:40:8C:DD:CC:EC:14:52:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e080::/48
Signature Algorithm: sha256WithRSAEncryption
48:bb:58:98:0f:52:a0:37:ab:56:b1:b1:69:d8:de:44:f7:22:
24:c8:1c:c4:ef:4e:a8:ec:a5:ec:4e:8c:b3:b8:32:09:7c:0a:
b1:16:da:c4:87:52:fc:6e:bc:53:23:19:b7:bd:4e:fe:d6:26:
2c:88:82:30:1a:8d:27:e8:22:b3:1c:ff:0e:06:37:a3:18:2d:
f2:2a:ca:c5:78:69:15:69:c4:64:ff:e0:b7:9a:09:3e:ab:8a:
05:00:a4:0d:f9:6f:38:d0:63:37:2b:c8:ad:73:16:5f:ee:24:
7a:ae:f9:01:55:d5:26:3b:6c:90:2a:6d:0e:74:9c:9d:31:ec:
4c:34:f5:ac:91:e7:70:a8:24:6a:2f:21:4d:e1:af:01:c6:b1:
22:b8:38:fa:bc:f5:70:db:87:38:4c:32:87:8d:62:33:bb:b3:
36:a4:8e:8d:0a:ab:fb:94:2c:52:de:94:20:19:58:ea:68:e5:
7d:3b:c4:da:4f:19:12:52:1f:1d:ec:6a:ca:10:7f:c3:58:18:
d2:eb:9f:35:86:5d:38:9d:c3:97:9a:8a:5d:e2:40:97:eb:70:
3f:49:5d:49:16:9e:2e:fb:42:93:3d:90:65:19:8c:04:1e:67:
db:07:59:71:04:db:7e:99:56:10:70:41:c2:2f:6c:cb:c2:48:
43:79:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:17 2025 by rpki-client