Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
File: 819bfec2-19de-4cdb-ba40-657fff6a743e.roa (raw, json)
Hash identifier: Eg2M2MslRMGURGzDQ31Pd3GaBDRBL9kxmTlKaXpL8hE=
Subject key identifier: 30:EB:C8:BB:20:BD:7C:95:BE:13:17:39:AB:A1:2F:03:96:2D:CF:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5122927D7A4DD6DA0253E9E2BFA74E7A9C5AA38A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:22:92:7d:7a:4d:d6:da:02:53:e9:e2:bf:a7:4e:7a:9c:5a:a3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=933969239cf71d2c307aaadba83e88fee5e9440c74ed3661a988cf544869dfcd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:0f:aa:d2:05:f2:0d:3d:88:1c:0e:1c:97:
52:6e:0a:84:de:e0:25:66:da:93:b6:99:bd:74:6f:
83:6e:68:67:36:75:ca:61:a8:b9:c0:8c:32:d0:94:
5a:68:72:d0:d4:fd:ef:c4:f5:2b:a8:f9:8b:a5:63:
a3:9c:21:2b:97:34:26:6d:20:1a:23:77:18:bd:83:
e5:93:6b:09:96:cd:f4:88:46:1b:a2:fb:7a:d7:2f:
b0:2b:44:4d:ae:70:49:69:77:a3:92:5d:47:76:d5:
41:97:0c:08:b1:c0:29:4e:b6:c3:5b:73:17:dd:69:
3a:93:43:20:b6:60:14:12:90:62:97:8c:e6:01:9d:
02:4d:48:6f:63:a7:96:de:d1:f2:8e:d9:ef:1f:94:
19:78:95:3d:98:55:5e:ca:8d:1c:3f:8a:98:8b:51:
2b:fe:ec:21:8a:84:65:2d:58:d7:f3:37:f2:12:97:
62:9c:16:17:70:f7:9d:b0:f2:52:56:7b:f6:36:15:
7d:41:6b:ac:b1:8a:89:49:6f:2b:9a:ca:2e:08:62:
74:73:63:ca:3c:84:ac:30:4f:ea:1e:13:5e:b1:8e:
9d:c9:3d:94:2b:a5:21:df:e4:36:20:11:3b:dc:1d:
60:54:87:7b:21:e9:4c:ac:cd:31:69:c4:3f:3a:38:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:C8:BB:20:BD:7C:95:BE:13:17:39:AB:A1:2F:03:96:2D:CF:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
05:5e:8e:bc:06:44:82:00:41:10:b6:fa:d3:73:b2:5c:fd:ac:
b8:fa:19:e0:40:ca:8e:68:8d:ad:4b:d6:5f:69:71:ba:fb:3e:
f8:f8:72:1d:a1:61:a8:b4:a8:13:12:e7:37:a5:3a:20:46:00:
4f:be:29:3c:bf:99:fc:94:92:a8:80:4d:67:d9:5c:d3:14:98:
ae:0c:75:0a:93:9f:ab:56:7d:79:32:52:70:a3:a1:7d:ea:ff:
eb:04:3a:c6:32:9e:70:a8:6d:fb:2b:bd:22:3a:12:cb:18:84:
bd:c2:9f:0a:c7:6e:6d:91:7e:b3:23:c8:91:34:76:2f:36:fc:
75:17:a2:2e:a9:00:08:3d:c5:c2:53:c1:67:25:de:10:33:6a:
87:ec:3e:a1:33:50:9a:7a:80:3d:af:24:98:37:bf:6a:f1:dc:
5c:af:87:2c:21:49:5e:c2:59:34:10:dd:93:f4:8e:a7:8b:60:
f1:66:ca:c0:34:af:06:32:36:c0:50:4b:e1:5f:1b:a9:cf:a5:
2c:0a:a1:f8:e2:0d:12:98:5d:26:c9:ef:32:68:f7:b5:21:85:
df:bb:53:79:88:55:e3:bb:65:69:57:08:83:61:e4:a8:c0:93:
36:59:52:dd:3d:59:3f:f1:47:20:45:e1:99:f2:19:0a:f1:d0:
e0:a1:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:13:53 2025 by rpki-client