Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
File: 8e492412-994d-4c48-a29e-9082ebce3349.roa (raw, json)
Hash identifier: k8IC6jqIqRD9IBLuDsu3pN13MMnq3AGPjKrJsE2aAh0=
Subject key identifier: BE:F6:6C:BB:49:1B:35:C2:D7:53:2D:00:12:FA:90:00:0D:51:CB:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 108901B6F0854398F6AAF3D992764998F1CFDC3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:89:01:b6:f0:85:43:98:f6:aa:f3:d9:92:76:49:98:f1:cf:dc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=4681efcb50cb75e9a68c82b753e504ed8592ddfdbe1ebad27e50ad3d6e5f60ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:28:5d:07:4d:77:f2:68:d5:f2:21:21:7c:
78:4c:b7:d5:d5:4c:02:d6:d0:71:21:b8:bc:1f:fe:
a7:93:1c:04:31:3c:ea:70:33:f6:fc:12:83:ec:1a:
8f:19:ca:f3:16:92:77:a4:6c:2c:73:1c:2f:50:7d:
00:a6:fd:ba:06:54:00:0d:81:27:15:3f:84:9d:51:
6f:8f:6c:55:7b:14:89:8c:76:98:65:70:43:aa:31:
5c:bf:e6:0e:3d:10:b8:11:ee:52:53:9c:b7:5a:e0:
a7:88:ca:5b:20:73:37:66:ce:c3:1e:5e:2e:55:09:
3f:b3:b3:6e:98:ed:23:68:90:46:4f:5d:38:65:69:
57:d4:03:de:fc:e1:d6:8a:b5:a0:07:98:3e:f8:d8:
bf:9d:bd:b2:7c:5d:4f:fd:3b:85:30:68:f2:7b:2d:
4e:7c:3d:22:3b:80:44:8c:16:53:7d:ae:c8:a4:02:
06:2a:60:51:8b:a0:df:79:d1:41:cf:e0:29:c1:6c:
92:1d:e2:15:54:6c:2a:75:c7:b1:7b:c6:fa:a6:36:
da:0c:77:9d:80:8f:54:f7:73:c7:1b:95:16:49:21:
de:39:23:e2:33:fe:6c:12:59:39:c4:47:87:87:b4:
7b:0d:5e:df:ac:40:bc:e9:02:1c:4a:d0:ca:6e:fb:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:6C:BB:49:1B:35:C2:D7:53:2D:00:12:FA:90:00:0D:51:CB:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:f7:38:46:67:94:af:56:1c:e1:38:a9:78:f5:32:5f:c3:13:
6e:ca:21:27:33:5e:5a:59:73:ea:3c:fa:8d:86:f9:ae:98:4d:
3f:1d:95:5a:41:19:04:95:79:05:b5:4f:bc:90:51:de:3d:74:
9b:aa:ac:74:a3:ab:e7:2b:a0:3e:28:7d:d3:19:6d:c3:de:82:
0d:1a:46:20:85:fe:48:0b:c7:a0:b2:4f:b8:14:3f:ce:e0:13:
df:88:07:7a:de:97:d5:35:4f:7c:f1:98:62:8e:85:8a:4f:53:
ce:08:df:83:20:0f:72:0e:2e:bd:9a:ad:5d:08:8b:1b:e9:77:
6b:49:1b:be:94:1c:49:c7:63:b0:b7:8f:04:bb:e4:5c:78:83:
81:46:21:d2:06:3c:8d:fc:51:be:ad:83:bd:c0:d7:37:e4:48:
29:01:49:46:11:ee:ae:93:cd:b8:d1:a1:1d:03:b8:28:77:8e:
ed:b6:f6:8a:78:39:4b:89:f2:91:30:25:55:ab:f0:ac:a2:d0:
96:21:8a:e3:55:26:96:66:30:7c:98:d4:d2:54:ca:56:e6:45:
fb:8e:77:49:6c:f9:e1:a2:de:d4:72:02:ea:37:50:71:ba:2e:
0e:e0:03:39:db:ea:39:e7:16:ff:9e:fa:c5:7a:f6:ae:08:51:
4a:e5:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:25 2025 by rpki-client