Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
File: 613f885a-7f25-486b-9eff-fdd6b2c05b65.roa (raw, json)
Hash identifier: Fas4R7pJrWk1pr22uboNQM0aaNV+CkUR/cRrF5+QLlg=
Subject key identifier: 69:56:B2:1F:4E:FE:89:63:92:29:E2:AB:C4:AC:5B:C2:AF:4F:5D:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6199708F7DA58CB81B62AFA69AAD19B02AE8AB0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:99:70:8f:7d:a5:8c:b8:1b:62:af:a6:9a:ad:19:b0:2a:e8:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3822348d0b6d7fbf023cd3c71f5c94c55a6eef7b17d8512b4b56d5a6107bd676, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:e2:fc:ed:5e:d2:27:8d:42:d7:5d:e8:8e:
80:16:a4:0d:e1:bd:08:7f:58:dc:e1:be:dc:32:40:
a9:9b:1b:f8:9f:9b:ab:96:0e:b1:83:ea:10:ba:67:
cc:33:6d:67:f5:5b:b6:d9:6e:58:19:af:b4:1e:87:
4e:3e:7d:e5:53:c4:1d:76:83:87:32:dc:7e:7e:7f:
80:b7:48:93:4a:fc:be:1d:e7:75:df:31:d1:cd:8b:
0d:f8:1c:ba:98:61:b4:a6:ea:cb:f6:71:79:eb:e1:
ca:50:de:05:75:4d:69:a9:eb:72:62:03:90:c3:2d:
07:3f:03:33:49:8a:e3:d2:9d:86:39:10:43:b6:81:
a9:d0:93:36:6a:aa:67:aa:a0:37:66:a7:61:96:ac:
d9:e1:20:af:2e:1b:34:17:5e:9f:d9:8b:80:87:4d:
58:49:d3:2d:a1:37:3c:9e:f2:93:6f:1c:77:c8:8d:
c3:22:d3:09:d2:d2:6e:b8:13:7c:bb:2f:8f:13:dc:
50:b3:40:f7:2b:9d:a3:8f:9a:d6:3d:92:0a:94:04:
8f:2b:b3:9f:d6:28:23:4b:a2:23:f9:72:35:a8:5d:
87:bc:4c:84:e1:59:32:e1:03:af:c8:1f:ca:65:7e:
6e:a9:0e:90:62:6c:c2:f7:4f:62:08:75:16:eb:0c:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:B2:1F:4E:FE:89:63:92:29:E2:AB:C4:AC:5B:C2:AF:4F:5D:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4080::/48
Signature Algorithm: sha256WithRSAEncryption
ac:bd:e2:d3:84:9f:69:4e:65:46:eb:69:ef:34:85:b2:11:4e:
8c:d9:12:3a:0f:e9:b8:c0:6e:c6:33:4e:b4:58:22:c3:b4:17:
c6:a4:de:75:a2:f5:ba:0a:52:5c:53:d9:d1:35:f3:15:2a:01:
d9:58:8a:82:15:05:86:a9:ba:da:40:98:fe:59:2d:06:7c:9e:
98:ea:90:3d:cc:15:1e:a2:cf:e1:70:62:c3:2f:23:c6:f5:f4:
ad:27:16:5d:b1:e9:32:bc:a7:85:52:b2:a8:f3:27:8a:6f:d8:
9d:15:1f:d7:2e:4e:bf:ab:02:cc:0a:d2:34:30:43:48:cb:03:
da:7d:66:1f:f3:1d:81:2f:58:ba:4d:96:69:b5:40:ed:e5:30:
28:c5:c7:fd:e5:6b:91:f7:27:75:57:24:88:88:5d:85:a8:e3:
e3:3e:04:43:d2:70:55:94:d7:4c:44:b3:7c:50:bf:20:e8:ca:
6c:6b:b0:e3:e1:16:d1:88:eb:49:de:84:77:38:94:21:31:7a:
e2:5d:63:7e:ea:13:26:db:d1:dd:df:1c:9f:52:72:41:74:fd:
b3:5c:5a:05:e5:7f:7f:22:ca:71:73:e5:91:ff:e5:ca:44:c7:
4c:c7:e1:72:9c:95:eb:cd:0a:98:a0:69:02:97:ce:c7:86:2f:
bd:f4:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:24 2025 by rpki-client