Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7c168279-3466-4837-b4c2-65829712acef.roa
File: 7c168279-3466-4837-b4c2-65829712acef.roa (raw, json)
Hash identifier: wgt+Rc5RG+7cSHoj6OKri9q8R+ypg8r4DCIt7AEm44g=
Subject key identifier: 48:86:8B:5F:1D:5F:B5:40:7A:3A:F7:94:8C:34:64:34:7F:EF:65:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7EF09D6D7D19A4F356648C204C588A5A010FC126
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7c168279-3466-4837-b4c2-65829712acef.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f0:9d:6d:7d:19:a4:f3:56:64:8c:20:4c:58:8a:5a:01:0f:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=e7ca65e9fcde49bdbd1914c528485c6dc0c478b56e029dee063425a6aa03b5cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:e9:3a:e6:e4:88:b0:8e:e3:b3:9c:7f:68:
8e:20:31:d1:cd:da:c8:82:5b:a3:0d:30:e3:de:03:
fc:73:c8:bc:f2:e1:e4:8f:12:c7:f7:8e:66:78:ec:
48:8e:26:16:2b:8b:7b:97:b8:18:d1:c1:68:bb:04:
23:bb:98:79:ef:97:90:c1:2c:a5:93:0d:09:9c:f1:
f5:bc:82:a0:f3:65:4d:5c:a5:96:29:d1:ef:be:86:
86:29:ee:40:93:b6:7a:e0:b0:01:fb:77:e1:27:26:
32:c1:c4:60:b3:e2:01:b1:e7:bb:79:2c:e4:9f:21:
62:dd:d5:6f:ad:f3:02:8a:d3:9d:3e:d9:b4:b7:54:
c4:e3:f1:82:af:11:ed:a7:81:32:cb:fc:9e:09:ec:
41:6c:a1:8b:74:61:e5:54:58:55:d0:24:95:46:b7:
38:9c:2a:0a:7b:77:ed:af:2f:ed:2e:ed:14:ef:3d:
bf:d4:4a:91:2a:0f:7f:7e:9e:d8:78:ea:d5:14:1e:
a1:23:be:1a:ff:a3:13:6c:a3:7e:93:37:2d:ad:03:
42:43:88:6e:ef:52:82:4a:ec:60:e2:cb:e2:14:55:
ec:6c:e6:74:ec:49:34:11:84:eb:63:bb:4b:95:35:
1e:6d:bc:45:a3:ca:af:47:e3:a3:c8:20:b7:13:92:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:8B:5F:1D:5F:B5:40:7A:3A:F7:94:8C:34:64:34:7F:EF:65:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7c168279-3466-4837-b4c2-65829712acef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:a000::/40
Signature Algorithm: sha256WithRSAEncryption
93:09:79:6e:61:9f:4e:85:e8:fd:37:1b:c0:19:81:37:31:3e:
c2:7f:af:af:b6:09:d2:f8:7d:83:85:67:83:6c:4b:23:bb:0b:
a5:65:c9:47:63:b7:e2:41:09:65:82:49:1e:59:bc:85:7b:95:
b6:20:0c:fd:52:e9:bc:8e:44:a1:74:67:2d:0d:2a:5d:b3:3a:
73:fc:d7:57:c6:28:cc:cc:15:70:2a:b8:1c:6b:7e:41:83:7b:
95:20:df:47:a6:6e:54:36:86:e1:00:9b:8c:17:4a:db:bd:11:
51:25:e1:b8:bb:71:b8:b5:60:8d:b6:98:bc:c6:fd:e7:f9:92:
d8:2f:fa:ec:be:5f:e3:ff:a9:b1:bc:a2:a4:50:03:0d:b5:68:
07:14:ee:bf:9b:18:be:58:9b:f3:06:68:d6:03:87:81:cd:c5:
7e:94:c7:ee:a3:9f:c8:fe:b9:7f:23:a3:1e:42:5a:31:ef:dd:
d0:90:2d:c2:37:43:38:bc:d2:46:81:b2:3e:e9:49:f1:4c:01:
df:61:13:18:be:51:29:60:00:a6:19:77:ca:ea:a3:ae:50:8e:
db:08:a1:12:0a:9a:c2:bb:14:b8:81:0d:87:47:22:83:84:02:
25:04:8a:f8:77:00:3d:5b:e4:5d:2c:74:60:4b:d5:55:de:57:
8f:a0:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:07 2025 by rpki-client