Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa
File: 7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa (raw, json)
Hash identifier: 1/7XRdhTMy5boCA0GrA770hxooEwRHn4htAnqmlIqFg=
Subject key identifier: 25:B6:DD:A6:1D:FA:98:2C:7F:B5:B4:5C:F8:F0:1F:B9:7E:96:EB:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0966EBBFFED363305811E4D1C7AB4F23D7C8BC95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:66:eb:bf:fe:d3:63:30:58:11:e4:d1:c7:ab:4f:23:d7:c8:bc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=10ff5f16d7a9f95a98000523f817a1f897b442eb54648b4d7f7def9ec5b44116, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:b1:a3:0b:cf:93:3a:2f:e5:f0:d0:46:36:
e6:52:e8:0c:ab:3a:11:9e:aa:95:b1:b9:c8:d7:39:
51:03:e7:73:a2:34:49:44:f0:8e:2e:5d:c1:33:61:
d5:55:46:0f:29:05:d3:c3:05:d8:0e:6d:5a:a8:cb:
db:30:df:1c:be:6e:0c:0a:7d:35:ce:d1:93:11:03:
c0:c1:0e:23:e3:5c:5f:4e:2d:59:3d:52:be:ad:1e:
9e:90:9e:ef:9c:06:ad:25:6c:2e:e8:b9:40:3f:70:
ff:51:1f:a4:90:3f:8a:d1:18:8d:a1:8a:4c:3a:39:
d9:51:ae:22:85:5c:b8:88:97:8b:4e:94:9d:cc:a8:
88:05:12:60:25:fc:6e:2d:77:d6:f3:00:30:f3:d6:
21:67:9a:e8:a1:67:e6:63:00:80:d6:1f:e1:b8:b3:
d2:a7:6b:cb:14:72:00:7e:fb:46:0c:03:88:0d:f3:
29:ec:17:06:37:b0:2c:16:1c:d0:9e:1c:aa:7a:d7:
e8:2d:b7:ff:fb:7f:06:40:08:a8:f8:85:73:b2:17:
81:ab:02:85:f9:af:dc:ce:f7:24:04:ac:0b:f8:fd:
30:2d:93:eb:2a:02:70:67:40:37:72:87:62:86:8d:
76:56:75:bf:d0:57:31:08:51:f1:42:d3:b0:4c:49:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:DD:A6:1D:FA:98:2C:7F:B5:B4:5C:F8:F0:1F:B9:7E:96:EB:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a040::/48
Signature Algorithm: sha256WithRSAEncryption
1e:54:9c:2f:ff:12:60:8a:9c:fa:0a:fe:46:4e:cd:10:38:96:
b6:a5:7c:07:1b:d8:be:5f:77:b3:08:03:3e:ed:75:11:9a:c0:
06:83:43:e0:dd:3d:29:40:e3:63:6f:8d:86:f2:0a:d8:0b:f7:
ec:8c:72:3c:ec:e7:f1:4d:76:bc:1b:27:f3:b7:d0:64:5e:cb:
55:ad:16:09:e0:65:95:04:46:c7:ff:68:ed:23:d8:b3:fe:7b:
62:ea:c8:f9:7f:a7:50:40:a0:02:a1:9e:66:29:72:08:84:30:
a7:ec:07:c4:f1:8f:ae:1a:a5:d3:5c:fc:12:36:48:6b:46:6f:
a9:d2:a5:86:a3:e1:8d:14:07:94:6f:3a:d2:c3:19:a7:06:46:
ee:f0:06:ba:20:8a:76:67:81:21:f0:b0:64:a2:fb:00:58:90:
6d:cd:71:73:22:d8:97:f9:de:43:e9:36:73:35:26:5d:62:f6:
1d:cf:59:41:b1:bf:f4:ba:91:7a:95:d4:64:b8:a9:4e:df:5d:
98:f9:f5:4b:83:7f:64:97:a8:88:64:48:9f:a7:c9:97:f4:48:
2c:78:e3:01:f2:b5:51:c4:8c:28:41:b0:bb:7a:5f:f6:99:63:
e0:1c:62:ed:c5:50:b9:7b:83:05:3e:95:ca:72:28:9d:1b:05:
78:02:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:04 2025 by rpki-client