Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
File: 5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa (raw, json)
Hash identifier: z55JVjElRscPwCipO/Nk2qi/82BaxqdxuDFFPcSjJlk=
Subject key identifier: E1:3C:89:B8:86:BA:69:49:9C:AB:89:83:04:3B:CE:97:F2:BE:0F:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21500C65C3F82A731E5BE1ADCE724889C2CDD0DA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:0c:65:c3:f8:2a:73:1e:5b:e1:ad:ce:72:48:89:c2:cd:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=cf5829755c6058e44776614d51cbb336c85c254981a804355ce3b51df7741e61, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:1a:4f:24:8b:37:d6:9e:23:36:6f:4a:28:
ea:e8:48:36:a7:9b:13:bc:2d:2e:0a:17:43:44:e6:
5e:32:47:55:c0:7e:54:4c:98:a6:7b:8b:64:b4:ae:
33:cd:95:cb:1a:e0:85:62:d2:da:71:2c:d7:19:33:
8b:79:54:41:a5:3b:56:23:bb:3e:ec:24:99:9d:7c:
0d:a9:23:51:44:1e:79:2c:61:51:7a:28:ce:60:40:
1a:81:2c:65:34:ba:aa:b1:b1:67:53:7d:f8:c4:ff:
fe:bc:9a:f8:d3:e3:1c:eb:d8:37:d8:7a:98:3f:3a:
74:4a:96:ac:cd:a5:03:53:41:b0:5f:1f:4d:52:a1:
25:8e:a9:94:bb:b0:b4:78:e9:66:fa:f1:1e:13:04:
43:6c:48:7c:04:ea:06:bd:7f:15:2f:7b:b8:37:e0:
64:a9:44:9e:98:8a:19:e0:9d:24:c2:6b:90:25:5d:
2d:da:06:db:0a:98:78:72:cf:8a:33:65:d6:4e:4d:
8f:6d:bc:50:f4:26:cb:b1:49:ef:09:62:77:1d:61:
2a:a2:ed:3b:a8:64:03:5e:64:21:6a:91:74:b5:e1:
26:8c:75:79:73:73:72:01:c5:26:0a:d4:cc:45:7f:
b4:15:b8:e3:95:01:cf:73:34:43:8b:ab:83:f4:5b:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:89:B8:86:BA:69:49:9C:AB:89:83:04:3B:CE:97:F2:BE:0F:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d::/36
Signature Algorithm: sha256WithRSAEncryption
97:bb:e7:79:6a:06:f5:ca:df:26:19:0e:6b:31:83:04:14:65:
c9:12:fd:f9:81:f8:d6:3d:59:af:c2:33:ec:b4:98:02:68:a5:
23:66:dd:92:27:10:3d:b2:fd:54:63:e1:3c:87:2b:e1:f1:56:
e0:a8:68:f7:dc:bf:61:62:68:bd:98:98:e8:9c:4d:d3:72:c0:
0b:85:ec:3d:c4:60:56:a3:82:bb:18:2e:70:c7:e1:4d:62:6c:
e7:38:1d:63:94:fc:e2:e3:51:c6:d9:70:2f:46:67:24:4a:77:
46:78:c1:0d:62:c5:41:bd:5f:e9:47:e8:c4:23:e0:0d:d7:cd:
e7:62:8d:f2:ca:7a:77:cc:c0:f3:4c:e4:57:9b:94:18:9b:6e:
92:5f:a1:8d:da:2f:80:d0:1b:ec:a8:2b:f8:7b:ec:d4:65:ad:
e0:5f:c6:27:90:9a:90:87:6d:31:b2:a8:d1:94:4a:2f:43:8d:
7c:92:47:b5:10:0f:bf:16:24:42:30:39:10:04:4c:20:76:f7:
9f:91:a6:81:d5:81:56:69:82:f6:16:0c:e3:1b:34:05:a1:c6:
c1:65:f2:a0:c7:7f:99:35:1a:cb:66:06:a4:f1:4a:39:a0:b5:
a1:29:57:b7:7a:9a:41:72:8c:a8:51:d0:d4:54:86:ef:ef:8f:
6d:3c:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:30:00 2025 by rpki-client