Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
File: 788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa (raw, json)
Hash identifier: eN9roCvrtDnZw4gODSw1jO1R5fT9ySBazN9RnTL/2n8=
Subject key identifier: 54:17:00:08:6C:9C:0C:E6:88:D3:08:53:58:3F:EB:E4:27:92:C9:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B6EEE0FC0E9F470867F8368CFB5BF885D7456F1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6e:ee:0f:c0:e9:f4:70:86:7f:83:68:cf:b5:bf:88:5d:74:56:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=c1f52a23ae24b8da43782098fdf8c6717e042583d2a04ce31ac908595b36bab1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:59:b5:49:79:9b:d3:5e:44:08:53:0d:c8:
74:5e:b7:d2:3a:d1:70:3a:98:c8:47:19:4d:77:70:
0a:15:73:9f:cd:ed:13:be:f1:e1:aa:f0:40:fb:2c:
64:a8:10:7e:b1:4c:e1:6d:28:38:ce:c3:9c:76:4b:
78:8c:c2:32:aa:06:d2:c2:30:65:7b:4e:77:8f:ef:
af:94:7a:c6:02:03:bb:63:be:33:c0:d4:d1:56:3a:
4d:39:90:c5:74:a7:05:9b:fc:31:7b:8c:1c:8d:65:
f9:f8:8a:8b:7f:38:a7:1b:31:dc:e8:b1:9d:ca:b8:
b6:fb:97:1c:97:a7:48:d2:22:c2:c9:e8:ea:dc:81:
35:1f:01:e7:39:76:76:bb:03:39:19:bd:d5:c4:ad:
e4:34:8d:09:ce:55:97:43:88:3a:a5:ca:b0:49:a8:
11:f7:21:e9:e4:8f:2e:14:05:60:78:d9:1b:9f:43:
92:25:60:e2:99:94:b9:69:0b:04:b6:68:34:f4:0c:
ae:1b:81:75:c7:da:7e:3e:81:fa:67:95:1b:6b:3c:
83:e1:72:9c:58:d1:a2:8e:2e:ba:f1:b0:6c:b3:e2:
93:3d:c0:1f:39:19:b8:f0:e3:70:1a:e5:a7:2a:ef:
81:90:03:70:b1:a8:1c:b4:05:9a:ea:82:4f:04:4f:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:00:08:6C:9C:0C:E6:88:D3:08:53:58:3F:EB:E4:27:92:C9:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:9000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:d0:d1:1c:ae:a7:25:74:7c:c7:24:61:1a:5e:e9:f5:26:d0:
8e:4a:5e:eb:36:9d:a5:a1:9c:63:0f:3f:0c:5d:95:5e:ee:2d:
13:41:03:c6:89:15:07:32:df:67:ba:56:6b:a7:10:c0:71:b7:
41:5b:2c:81:40:a0:0d:21:58:84:7e:14:8e:1b:bd:63:0f:bf:
27:9a:1c:62:08:ec:c0:7e:35:3e:51:0f:f3:88:fd:4e:60:53:
3a:c0:7d:04:d0:6c:75:dd:29:6f:5f:1d:2e:3f:4e:ee:6b:f8:
0a:44:39:d1:78:08:90:da:92:90:fc:64:f1:df:af:c7:86:9f:
23:b2:05:6c:67:b8:ec:6d:2f:87:3a:d2:5d:e2:b6:29:99:92:
86:2b:60:0c:0f:db:d5:6c:78:52:cd:00:5d:ad:0b:44:6e:f6:
38:bd:16:a2:bf:ae:fb:0c:25:93:09:b4:b3:27:04:6a:1e:e2:
74:d2:ae:a2:bd:0a:40:ff:57:61:9b:c8:b2:94:0d:3b:50:72:
28:47:ea:69:8b:9c:6c:ae:47:23:d0:76:59:51:ec:b3:fd:dd:
20:73:73:17:12:1c:96:72:bf:e7:31:35:c8:4b:09:68:d8:47:
3f:f4:14:cc:2e:f6:e5:0b:80:86:f6:7b:2d:9c:30:fb:c0:d9:
20:8e:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:37 2025 by rpki-client