Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
File: 76a60505-d74d-4741-a42e-97a09bb6b2a1.roa (raw, json)
Hash identifier: QJgszz7zL+XDilAzkVlunbbaQv9JdtQZDOsFlF3feUc=
Subject key identifier: 95:E6:11:A9:D7:A4:8E:7A:21:A9:7D:88:28:1D:38:15:65:DF:6E:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70B74B27E3F11528DBFC27FBAA84066821AFA5C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b7:4b:27:e3:f1:15:28:db:fc:27:fb:aa:84:06:68:21:af:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=881cd0345890c0c8b9823418478b470bcc7625d1fcfecb2e5b5fde9227766866, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:89:a5:01:ca:3e:44:bc:61:c3:73:5d:8e:
e5:48:24:49:e6:47:5c:ef:4c:ca:92:f0:fe:11:a6:
f3:96:3f:2e:b0:cc:9c:77:f0:14:da:65:6a:4e:c4:
4a:b8:48:2f:98:e5:c8:e1:dd:8b:f5:aa:59:a0:1d:
77:e0:af:5c:a6:78:7d:33:32:c4:02:69:bd:c8:26:
1c:42:ab:6e:ee:d2:92:67:e1:ea:cb:4b:57:95:cd:
24:25:28:44:b3:52:bf:3c:f5:f3:56:68:fa:3e:a3:
c7:15:9d:12:ac:c7:60:e0:15:5b:2d:ff:22:a3:3d:
22:78:78:ee:84:81:43:3e:7b:26:36:13:d0:f8:09:
1c:a0:69:52:e6:38:9f:60:a2:53:7f:9d:ba:d5:83:
4b:74:98:ba:b5:c9:12:47:4e:6a:2b:7d:82:8c:9d:
f7:ce:b3:b6:52:09:e6:6d:99:ea:12:aa:8d:73:ba:
77:c5:77:1d:19:8f:32:d1:93:92:8c:dd:73:39:05:
86:12:0b:7d:52:1e:cd:c0:7a:2b:08:04:29:6b:09:
b6:ae:6b:cb:76:ed:d4:24:cd:f6:7a:19:0d:68:86:
1d:ba:3e:9d:4f:a1:f3:ce:2b:93:af:0e:b8:88:1e:
23:53:d9:c1:e6:f0:23:0e:73:9e:e3:77:75:50:83:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:11:A9:D7:A4:8E:7A:21:A9:7D:88:28:1D:38:15:65:DF:6E:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8080::/48
Signature Algorithm: sha256WithRSAEncryption
ba:07:31:6f:64:16:11:c0:cd:dc:25:d4:65:92:c6:30:a7:54:
f1:5b:65:c0:ca:6c:db:fd:32:03:9b:2e:b0:24:ff:0b:94:c7:
3b:14:60:7a:5e:f8:16:9d:dc:cc:23:2f:29:01:bc:b3:a4:7f:
0f:8d:fd:74:c7:08:41:fd:38:aa:f5:75:e7:ed:e3:49:57:6a:
42:bb:4c:da:20:9f:3f:67:99:18:8b:b2:1d:7d:f5:41:ed:6f:
f2:f6:7e:4a:c7:8e:bc:e8:4e:9c:26:7d:32:74:90:2c:65:7a:
97:80:e7:3a:ce:e6:c0:86:01:ad:2d:b8:4f:38:6e:a1:4d:65:
17:7d:55:07:3b:4e:71:eb:23:c9:b0:85:11:47:34:45:68:ab:
5e:e0:1c:a5:88:a7:06:9b:1b:de:02:a9:68:f0:63:cf:05:16:
19:90:3d:bc:27:10:dd:14:94:86:a6:a2:a9:58:0a:b7:e2:96:
cb:17:aa:fc:42:63:50:39:f0:08:43:a1:65:89:96:ad:2a:b8:
6e:1d:5f:eb:7b:0d:07:b0:72:5a:4d:15:d9:20:db:63:15:47:
ab:6e:50:87:bf:67:42:5d:fc:5b:4e:95:ef:9e:19:e0:11:dd:
b0:9d:e7:b8:54:7b:61:48:a7:9a:df:24:57:bb:a8:65:2b:4e:
3f:1b:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:40 2025 by rpki-client