Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: bnBz8Y4+BLQ+TVXt+6XndB7fmRIhZyI8epZ27fcFsqc=
Subject key identifier: D2:AF:E4:06:67:48:E3:6E:8B:3A:3F:AD:33:07:48:35:69:95:38:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73C00DB207E9AEC39A091D73BDD78DAB85F524CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c0:0d:b2:07:e9:ae:c3:9a:09:1d:73:bd:d7:8d:ab:85:f5:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=725b685cf36c21b54b67052f934b68c92c757cf49a577598b61a2f968871af13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:17:e6:e4:a6:d6:81:f1:7f:96:06:97:75:
ab:05:85:97:c4:29:90:60:bc:0a:c5:45:d9:8c:f0:
2d:79:10:32:78:1f:59:ec:3e:84:e9:a1:ee:07:d9:
a7:d8:1a:30:23:fa:76:f4:62:f4:c9:42:02:bc:8c:
01:87:d8:43:04:3e:f7:22:10:7a:b0:e7:ab:4b:a5:
19:fd:1e:89:c3:94:5a:05:d5:b2:95:46:05:74:20:
c2:16:1b:35:58:ce:78:54:9a:db:85:63:ee:89:b7:
b0:8c:d8:48:11:ff:0a:d3:2b:7a:d3:4e:80:fb:39:
0a:f9:3a:37:15:70:33:71:18:0e:3a:56:34:09:94:
97:15:c3:31:1c:01:7e:88:e6:06:a9:a2:ab:0e:51:
f6:d2:83:66:8c:a5:6c:bc:db:ed:f6:64:4e:4d:ab:
ca:8a:fb:f0:2b:75:5d:5b:cc:14:45:2d:5f:1f:13:
d0:fb:6d:16:d3:5d:6a:90:fe:bd:51:26:75:8e:fd:
5c:81:b1:8b:97:51:82:bb:3a:6c:a9:2a:21:52:36:
00:2e:96:4a:97:65:f0:c5:e8:ee:c3:9d:5d:06:33:
69:51:13:4b:8e:23:65:64:c5:d0:fc:52:4a:fc:c6:
ea:c0:19:f6:c9:de:55:8e:3d:46:80:73:0c:30:56:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:E4:06:67:48:E3:6E:8B:3A:3F:AD:33:07:48:35:69:95:38:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
79:dd:03:fc:29:ef:97:0f:14:bc:f3:46:f9:2d:ff:9f:d9:13:
86:08:1d:a7:78:28:44:2a:8d:e4:57:3f:cc:10:86:6f:09:68:
9e:a7:b9:b6:91:a9:4a:bc:b9:71:e4:ef:0e:52:b2:18:87:29:
06:11:a3:87:cd:4a:73:69:71:8e:c5:ca:57:70:25:af:3f:6c:
6f:5f:a7:d6:d9:59:5f:61:e6:ab:bf:a6:07:2b:e7:a3:05:f5:
ed:6c:35:20:b3:d9:54:2c:87:a3:47:42:c5:d4:fc:8e:56:c5:
58:d1:65:32:b3:a7:18:72:87:bf:13:45:a7:6b:e9:00:dc:8d:
80:48:56:51:34:f9:c8:8d:7c:33:86:6e:73:1e:bf:08:79:d2:
c3:6e:72:de:ec:a7:6d:3a:d3:b7:6c:ea:c6:d2:96:2b:fa:a3:
d4:71:00:02:97:89:b4:72:b6:22:07:cb:c7:0c:15:67:f6:6b:
49:61:38:da:2c:16:07:19:f4:65:3d:62:48:f7:dd:f9:69:79:
8c:ce:27:ab:66:87:ca:1b:c2:39:cb:27:d1:dc:c0:70:31:e7:
f6:ea:0b:0a:55:f8:16:56:a6:ad:39:aa:70:dc:e1:98:d0:52:
5a:70:72:1d:3f:d5:09:4e:1d:4d:49:4a:d5:02:92:b7:c7:2f:
2e:ca:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:04:47 2025 by rpki-client