Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84f9d9fa-59fe-4651-a60a-2561da098ccb.roa
File: 84f9d9fa-59fe-4651-a60a-2561da098ccb.roa (raw, json)
Hash identifier: EqaWyFVplqUo8zi2wsBbO7SawU+oHzUWrUH6TIDVb1E=
Subject key identifier: 9B:25:63:0E:44:5E:3D:48:E3:00:41:6A:26:06:5D:4B:84:A1:6C:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29F0E4422C7A445EB49BB275BFC49C8EF59B440F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84f9d9fa-59fe-4651-a60a-2561da098ccb.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f0:e4:42:2c:7a:44:5e:b4:9b:b2:75:bf:c4:9c:8e:f5:9b:44:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=db88776a8b93789a5a97b2738981c017478ffae1cb4e1cf3a6848c60a6128b11, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:f5:25:38:b6:70:cf:dc:ca:35:8e:1e:e1:
91:d5:a4:4e:6b:78:4f:63:dd:91:da:36:f8:ed:59:
bb:eb:8a:8b:af:fd:e7:20:d9:a8:f1:83:a2:8e:c1:
97:95:a7:cc:d3:8e:a6:64:d1:62:35:76:01:51:7a:
a7:02:ae:66:5a:bf:84:ad:5a:13:a1:c2:24:9c:f2:
4e:01:29:e8:d9:55:72:4b:4a:72:32:83:43:8b:e2:
2c:ff:56:c9:c3:cc:c9:28:5d:63:b7:7f:4c:e0:05:
a0:d2:61:e8:aa:e3:2e:80:2e:51:a0:1c:a9:83:53:
2c:28:98:50:24:2a:2d:d9:62:ad:ff:25:48:42:16:
78:d6:1a:34:9b:06:51:96:06:31:1d:3d:4b:35:11:
8f:97:5b:52:ad:0c:f1:de:3b:bb:d5:2e:da:5d:bf:
a6:c4:81:00:d2:03:d5:e0:ce:19:c0:c1:c4:d9:79:
8e:7c:c6:d8:bb:51:df:7b:6d:f8:e8:0f:d9:dc:35:
3e:30:9a:9b:50:29:8a:4e:e2:ba:11:f9:26:2e:4c:
f2:3f:30:e5:ec:1b:b7:87:91:07:53:41:bf:3e:d8:
72:f9:20:b5:58:d1:be:31:d7:72:9b:45:63:1c:4e:
fd:dc:25:87:f6:28:8e:20:33:03:04:17:ee:59:d3:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:63:0E:44:5E:3D:48:E3:00:41:6A:26:06:5D:4B:84:A1:6C:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84f9d9fa-59fe-4651-a60a-2561da098ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8080::/46
Signature Algorithm: sha256WithRSAEncryption
78:07:c9:fc:56:4c:99:e9:67:0a:43:33:fc:02:33:b0:49:26:
9c:7b:b8:7e:8f:df:09:bd:51:ec:2e:4f:41:c4:b9:2b:99:1c:
b3:cf:9d:f4:4b:e2:ae:79:1e:7b:be:cd:d3:80:98:74:1a:8d:
4a:19:46:c4:11:a0:47:00:03:9b:9c:2d:55:7b:86:24:0c:22:
d3:70:8b:7c:e7:03:ba:97:54:40:ce:88:f5:55:3d:3d:84:be:
3c:7a:97:63:03:0d:00:f6:2f:f7:67:11:77:44:99:26:bc:5b:
15:e0:3c:bd:66:ed:ca:a6:42:fb:fa:71:de:f8:57:6e:db:56:
2a:c6:6a:bc:ee:7d:ce:28:db:28:eb:4a:c7:f9:24:ea:06:25:
42:fe:98:9b:6a:67:7b:b0:49:a1:86:ab:20:c6:14:d8:e3:92:
21:e9:af:d7:26:ab:69:bf:0d:fc:a6:11:71:96:27:d6:02:dd:
d8:0c:a7:3f:5e:b0:81:53:a0:52:65:8f:12:e9:a3:12:08:13:
b1:6a:02:47:8c:16:4c:19:1d:c2:1f:11:3e:a1:e4:2c:7f:ac:
85:8e:6d:f9:47:4b:b0:d6:a9:96:ad:dc:85:b4:f4:8d:1c:52:
5e:1a:ab:21:a5:11:c1:8b:56:9e:f0:71:55:50:ed:87:42:f4:
40:a6:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:33 2025 by rpki-client