Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ec34216-a73a-4f02-b92a-08993431272e.roa
File: 6ec34216-a73a-4f02-b92a-08993431272e.roa (raw, json)
Hash identifier: /swtFCUtf3qlg0Yv7lXF3ISGcVE5b4ck1yzgae7UHJ8=
Subject key identifier: 64:E9:BD:6F:E0:F5:B1:56:78:FD:C5:4F:19:6C:B6:EB:FE:8A:6F:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69A0371FD97368863D76B2307A48465C0F3A3FAA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ec34216-a73a-4f02-b92a-08993431272e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a0:37:1f:d9:73:68:86:3d:76:b2:30:7a:48:46:5c:0f:3a:3f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=03499fb18268587c6d1e6b5784a21017717de055350ee3552739fc0b465007a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:08:42:2f:0d:59:c1:c5:50:cb:03:32:06:
0d:d2:32:52:db:76:41:10:e8:6c:1f:5b:7e:cf:b1:
ee:59:46:4b:fc:00:3e:ed:9f:9d:20:40:42:ce:82:
8d:1f:a1:a3:e7:55:ff:7a:77:fa:d2:47:fc:4d:03:
af:cb:98:95:89:b1:26:d3:0d:76:cb:64:8b:a4:ba:
c6:4a:f4:d2:52:f3:be:6c:13:05:a7:1f:fa:b3:10:
08:6b:c5:60:8f:28:50:65:10:4a:1e:72:a2:f5:40:
90:f3:2c:0c:2a:cd:9b:e6:ea:d2:72:52:86:7a:e1:
04:00:28:7c:cd:44:f3:93:a0:5f:45:cf:dd:b1:5a:
eb:44:8c:25:8b:71:04:8f:cb:c8:ee:5c:b4:6d:e7:
ce:42:17:43:cc:ec:0e:4b:70:14:cf:56:a0:e5:e0:
e6:30:45:f0:63:00:fe:a4:3e:5b:b3:ef:ba:88:31:
9f:4f:87:ef:07:7d:9f:4e:44:49:1f:ab:0a:90:a6:
10:8c:79:d8:4f:82:04:b6:28:7c:37:a9:e8:4a:ea:
eb:3b:c6:1e:17:1c:ad:cd:fd:ec:2c:ae:b5:a2:c9:
e4:bf:dc:85:19:fe:d6:21:4c:d3:b4:b9:2f:e1:89:
37:99:39:c8:4e:26:2f:ce:73:95:1a:0b:5a:4d:8a:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:BD:6F:E0:F5:B1:56:78:FD:C5:4F:19:6C:B6:EB:FE:8A:6F:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ec34216-a73a-4f02-b92a-08993431272e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e080::/46
Signature Algorithm: sha256WithRSAEncryption
64:d0:d7:c7:fd:b4:75:79:31:19:2d:e4:ed:f9:5f:00:bb:85:
8c:f8:9b:11:33:25:17:da:cb:17:1e:44:b8:98:60:fd:9a:06:
d1:c5:6d:8b:17:25:a4:c1:45:01:fa:de:26:b5:a4:43:15:d0:
2a:a9:32:d4:28:3e:34:a5:53:07:8c:c6:96:c6:bd:3f:22:56:
dc:44:2d:81:be:55:1f:8a:5a:b6:98:7b:0a:c0:24:f6:0d:79:
30:55:9d:fe:7e:0f:36:4f:a9:7c:a4:a0:6e:da:9c:8e:ce:5d:
cd:4c:5d:9b:c3:90:da:07:70:4d:38:aa:66:4a:35:9c:58:e7:
cf:92:d7:7c:0d:e4:51:56:bb:2d:e7:30:e6:2e:26:fb:75:c6:
73:5d:2e:09:d5:73:35:67:d0:33:8c:ac:bb:ab:be:d6:c1:be:
49:ef:61:6b:36:a1:cc:19:55:57:f8:75:bb:a0:e3:9e:67:b4:
f9:31:ca:bc:6d:0b:e4:b0:b3:a8:80:01:f1:a0:22:64:08:33:
10:8b:c8:8c:d6:ea:9a:21:07:9b:af:01:6e:d6:12:ee:93:15:
ad:be:01:74:26:b7:ed:2b:13:23:ca:b7:32:a3:8e:f5:6c:de:
51:43:a7:c0:70:72:7c:4b:12:12:2a:cc:fb:77:17:9c:b4:29:
de:5c:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:51 2025 by rpki-client