Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa
File: 68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa (raw, json)
Hash identifier: i9tm+T+tg4bT0riB3jSdI+OMWp2KJZ9N6Ch3ICQFfo0=
Subject key identifier: 9D:C7:09:8A:24:F4:2B:8C:42:61:10:B2:14:EA:0B:A0:07:99:AD:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69CF8BFFD995DC95521AF61AAF324240FF05B4ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cf:8b:ff:d9:95:dc:95:52:1a:f6:1a:af:32:42:40:ff:05:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3576bd6eb8b8a9494ed838f25efcd5d96faebfd64bd456599aca937166fc0e7b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:11:3e:5c:ba:34:10:59:34:08:65:7c:d5:
e0:23:35:7c:7a:a9:76:e3:bd:a2:82:ca:8c:30:57:
06:21:02:fa:36:a7:d0:e9:90:9f:30:11:16:0e:b2:
8b:20:1f:fc:a0:2a:bc:5c:d4:1b:df:3a:d3:a5:08:
73:1c:e9:18:22:53:b5:7f:2b:bd:31:0f:08:0e:e8:
4e:80:b6:12:39:82:fa:7a:23:56:53:f7:2b:75:a8:
5a:b8:1d:8d:be:a6:5a:29:40:d7:dd:8c:78:87:a9:
38:44:c3:06:b1:5a:ef:ab:de:97:06:49:1d:c1:fe:
ac:cc:bc:1e:cc:29:17:a9:e6:d0:f4:7f:85:93:69:
12:57:81:ff:5f:33:4b:d5:1c:80:81:88:2a:f6:41:
01:2d:60:be:5c:9f:8a:3f:9a:2f:b8:ed:82:af:4d:
74:bf:cf:fd:eb:49:d5:6c:10:45:5d:53:e9:de:e9:
6b:62:cc:37:64:86:d3:bf:ed:ae:70:ee:64:ca:6f:
6f:8c:a6:c1:f6:84:d4:60:16:75:8c:a5:03:9e:87:
1e:4e:20:c9:38:20:66:a8:32:9e:f6:3f:9b:52:a4:
8d:1e:13:49:30:e2:24:e6:b7:3a:8d:60:78:10:18:
3e:39:01:3b:39:fc:ff:3b:17:f9:71:ee:cb:27:4b:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:09:8A:24:F4:2B:8C:42:61:10:B2:14:EA:0B:A0:07:99:AD:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c000::/40
Signature Algorithm: sha256WithRSAEncryption
79:c1:20:5d:8e:58:e1:0a:bf:bb:82:fc:4a:54:8a:87:9a:b8:
5c:d8:ce:22:c2:d7:8b:33:c1:55:48:b2:05:85:a9:60:a1:19:
b8:c6:0b:88:2d:d3:73:89:26:fa:cc:c0:3c:cb:4f:d0:e2:b2:
2c:10:bd:a4:ce:32:82:64:09:f8:f5:5a:75:fa:30:78:ae:9d:
7e:a5:a3:6e:bb:8b:ab:90:50:ca:fa:38:9a:73:09:60:74:09:
5b:8e:bc:2a:f9:84:c8:8d:6a:3f:3c:c8:c6:f2:b3:db:ae:95:
ba:4c:16:9c:b1:e6:30:72:47:ec:db:bd:7f:79:ea:b0:44:c4:
7c:3a:6d:03:40:11:8c:03:53:d5:94:e7:60:fb:18:97:c3:f9:
7e:d0:4f:ba:b1:e0:2a:cc:bb:ee:07:58:43:46:76:4d:a3:b1:
7f:d8:aa:0c:d0:fc:b3:da:61:cf:30:4e:84:8d:b3:67:14:1b:
d6:24:49:8e:45:61:fa:2f:a6:51:87:11:6e:22:cc:f6:86:0c:
14:e5:d6:09:ab:e7:a8:64:7e:4e:00:e8:00:0a:e0:29:7d:cc:
13:3e:f0:83:77:e5:f1:c7:fc:4b:1b:2f:a2:22:2f:13:0f:a1:
09:ca:0b:6c:e2:94:74:d5:47:28:99:9e:09:1a:3f:dd:ab:9d:
56:49:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:13:47 2025 by rpki-client