Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
File: 8b940c44-168e-4976-b17d-778e9341611b.roa (raw, json)
Hash identifier: ERI4pXVqSfpIN0OOF3vp65dHRuv9Robx1qy+lFb7BNA=
Subject key identifier: 2B:58:62:DB:76:40:F3:B5:EB:2A:BB:37:7B:A3:45:4A:C8:E3:ED:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62579D56B18A9FA72CA48E210EE59718962C39CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:57:9d:56:b1:8a:9f:a7:2c:a4:8e:21:0e:e5:97:18:96:2c:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d18b9824da82beb40b7c7a8ba7de0cb6f6331de8a6f3cff590d1a1fb4e226170, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:cb:3d:0c:cf:43:3b:83:c6:6e:32:05:20:
82:db:3d:58:3e:1b:0e:93:c7:05:d8:07:76:8e:a0:
5a:80:24:53:36:1a:32:b1:36:c4:60:04:53:a3:fe:
d0:a3:04:df:c8:38:68:d5:e4:02:ed:64:06:c6:aa:
b9:60:21:2a:3e:19:27:34:02:d9:14:e1:24:b3:8a:
48:b2:97:4b:9b:f2:3e:ea:a4:cc:a9:e2:23:82:da:
6c:93:e5:21:d1:95:cd:2d:69:bc:46:c8:64:0a:0d:
d4:fb:ad:71:70:29:37:c2:69:bc:09:c3:83:6e:3d:
6a:ff:a0:1c:98:35:f9:78:35:5e:c4:7f:f9:ac:17:
df:f6:5d:80:ef:15:37:d8:6a:49:e9:a1:dc:79:db:
f3:7f:dc:c3:de:b1:7b:a5:20:a3:c4:45:45:f2:36:
5a:80:20:3b:57:d6:d3:84:33:b4:b9:72:79:85:58:
99:8d:71:cd:f0:51:6b:d2:48:c5:3b:4e:41:28:0d:
e9:f3:32:41:31:08:4c:b1:e8:8c:9a:cb:4f:70:38:
79:ad:56:b6:fe:50:e5:d0:30:80:21:c6:e9:4a:7f:
d5:ac:70:c8:89:f7:f0:84:6f:dc:54:50:9e:02:e9:
76:6f:cb:71:80:a2:4b:55:bd:e8:96:07:31:12:9c:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:62:DB:76:40:F3:B5:EB:2A:BB:37:7B:A3:45:4A:C8:E3:ED:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1080::/48
Signature Algorithm: sha256WithRSAEncryption
ad:1b:3d:5a:58:27:1f:fd:81:56:f7:8d:7d:93:29:9c:b4:5c:
52:29:1c:d5:ab:68:7f:69:13:54:78:f4:95:65:9f:28:02:0b:
9c:7b:ca:56:d4:91:f7:16:04:58:51:fe:db:f2:8a:e6:a3:a9:
08:b7:38:7c:1a:b3:bb:20:c7:0c:8b:4c:ea:8f:d0:9f:1e:b8:
78:34:f2:0f:fb:27:0c:2e:13:3d:31:2c:65:fe:b0:7f:65:cf:
a2:cd:7a:18:52:27:69:b7:3b:a8:21:e8:9a:d0:ca:9a:fa:b6:
dc:db:1b:eb:d0:2b:80:89:ea:20:d2:16:a1:da:8c:52:a1:d1:
f4:19:8f:fc:98:4b:a5:f7:00:4b:d1:c4:9b:88:e3:a6:53:e3:
80:79:e5:f5:30:63:48:d5:7b:c2:9a:f6:90:50:73:61:ed:54:
47:6c:a5:57:72:0e:84:e7:51:ee:15:22:7f:73:b1:37:d2:0b:
7e:75:04:15:fc:2a:a3:90:40:0a:2a:78:a8:6d:ca:eb:3b:22:
7c:aa:7e:9f:01:6c:b5:c3:fd:36:29:3d:49:a0:94:2c:0a:92:
01:a1:f0:29:e7:79:09:cb:40:20:d5:0f:74:e2:df:31:cf:74:
0b:79:c6:91:df:1c:62:74:c1:e7:74:ba:cd:cc:52:21:85:c1:
51:fd:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:45 2025 by rpki-client