Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81574dff-feff-4992-98e4-f8b95431a28d.roa
File: 81574dff-feff-4992-98e4-f8b95431a28d.roa (raw, json)
Hash identifier: IY6VkRpTyVTCDXKi2Ti0pPxz7Ch1fnpPJsgpKtM9DZM=
Subject key identifier: 53:1A:B4:68:D4:79:4E:63:5E:1C:B5:3D:B7:71:A2:1B:7D:C4:3B:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 722C48B01386ED8A6A3E2137F4C516459A62DD5A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81574dff-feff-4992-98e4-f8b95431a28d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:9040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2c:48:b0:13:86:ed:8a:6a:3e:21:37:f4:c5:16:45:9a:62:dd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ee8b04f9e1ba50d5bb34071e76455416740a27f2b0a4fa8076d341b567bd799c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:f0:1b:e0:74:73:45:c2:31:66:b8:17:2a:
93:6c:61:8b:a2:fc:8d:81:59:56:e2:f1:01:04:c7:
0b:89:28:da:08:bb:fb:71:02:7f:8e:b4:25:a6:04:
91:58:22:d6:fa:af:95:2b:f2:1c:37:d7:bf:7c:00:
a2:f4:93:55:54:23:8e:e3:43:3a:b6:56:e4:25:40:
90:da:e1:72:aa:63:2e:02:4b:38:09:63:48:8a:9e:
24:c9:d8:02:2a:57:b3:d1:61:4a:da:c8:a8:f3:a4:
d7:6d:74:94:5b:a3:4e:a9:87:d1:1f:b8:63:02:f3:
fa:09:7e:40:5a:7d:33:d4:8f:ab:b4:34:76:05:b4:
05:15:a4:e8:90:84:c9:9c:f5:47:70:a8:7e:75:cb:
69:1b:2d:ed:53:32:d4:6c:e7:a2:53:e4:a0:6c:5a:
1c:51:34:f0:11:1d:d7:25:1f:ac:4c:3e:b5:ec:df:
07:cf:c0:d1:51:3a:70:16:ca:5d:57:4d:10:c9:d0:
46:55:44:53:3b:a6:2e:c4:3d:44:8c:a0:87:53:8f:
85:bd:5a:fd:4c:e3:85:30:bd:f1:0a:5e:2a:36:59:
b4:7c:70:57:a9:b0:69:90:38:b6:f7:59:cd:15:5a:
72:ac:13:27:c3:e3:bb:a6:14:38:07:4b:06:4f:be:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:B4:68:D4:79:4E:63:5E:1C:B5:3D:B7:71:A2:1B:7D:C4:3B:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81574dff-feff-4992-98e4-f8b95431a28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:9040::/46
Signature Algorithm: sha256WithRSAEncryption
11:6a:c7:8e:b9:87:48:72:21:7c:d5:5e:6b:94:f2:2f:f8:a7:
28:02:98:2d:a8:d9:23:4c:c5:64:47:16:c9:79:16:f2:1f:55:
bf:55:f2:2b:f1:c4:2d:1e:c2:1e:99:84:0d:cb:42:3f:5a:bd:
0b:50:a7:cb:b5:71:e3:83:1d:e1:56:cd:0d:07:55:c4:53:7f:
e3:78:90:b0:53:2e:45:0a:56:b3:37:34:b7:87:a5:0b:8f:07:
cd:e6:24:f2:30:e8:2e:28:f5:25:10:17:40:a3:1b:7d:1f:f0:
5f:3b:fe:7d:ce:9c:1a:90:31:51:63:e8:42:18:af:bc:70:9c:
4d:5b:51:59:e3:27:ac:6f:21:75:1d:e1:8d:07:62:df:31:0b:
ff:9c:ec:b8:19:bd:2e:64:79:93:30:07:58:b5:28:4f:43:0e:
cc:11:fc:f8:8a:5d:1c:b7:57:b3:62:cc:06:dd:fc:e4:43:fe:
63:35:32:12:8d:4d:de:3c:62:d7:30:9d:cb:2c:d4:7c:5b:72:
bb:37:87:fa:c8:9c:4b:cf:56:e5:53:9d:85:28:4a:5c:f0:23:
11:ed:b0:a5:55:5a:09:73:fd:c8:d0:58:23:c1:84:01:45:7c:
4e:82:61:27:a2:ed:64:9a:22:f6:23:44:52:46:ef:c1:34:34:
a0:a2:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:25 2025 by rpki-client