Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93932fd5-a431-4690-94d6-ed2f97f585c1.roa
File: 93932fd5-a431-4690-94d6-ed2f97f585c1.roa (raw, json)
Hash identifier: SwH76P4oBrcnYVvOVPjiuqul2fU1zwjRl8+WDcw8Ig8=
Subject key identifier: 41:65:6A:16:0D:1B:12:FF:F3:9E:07:B2:6C:D8:C4:2B:BD:07:17:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 378F97ECB9ED532D09B5C798487EC01AD210F71A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93932fd5-a431-4690-94d6-ed2f97f585c1.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8f:97:ec:b9:ed:53:2d:09:b5:c7:98:48:7e:c0:1a:d2:10:f7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5d492e9a86385a0e93da396387a252bff3d499b7da6e1891b29b6501957a96bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:d0:d9:12:54:75:47:6f:b1:02:f2:8b:2d:
4f:20:bd:b0:1f:de:d4:05:3b:50:83:48:10:bf:d6:
bd:32:55:0b:5f:11:26:0b:89:e9:15:5b:c0:67:f4:
03:f0:9f:d3:7b:1e:ea:04:60:bc:d8:43:3d:4f:46:
ad:e3:86:d2:7a:a4:28:a9:b8:a8:19:51:7f:af:97:
a9:40:f5:1a:12:6d:bd:26:c9:36:22:b8:96:b6:a6:
5f:63:fb:ba:b0:86:a1:05:3d:00:31:f5:e6:fc:cf:
1c:fe:7a:28:4c:75:f1:a3:a8:9b:69:6b:df:df:11:
de:a8:e1:db:57:be:4a:6f:9f:6f:13:77:66:5d:49:
e3:5a:12:82:1f:83:28:9a:a0:75:e2:62:44:28:69:
dd:de:54:f1:3b:e2:16:eb:ec:6a:d8:9e:a7:14:2a:
28:d7:de:a0:d0:ac:39:fb:e5:69:08:87:40:52:fd:
12:fd:3f:0e:d3:f8:29:20:14:b4:b8:61:f1:38:8f:
6e:b5:ca:8f:6f:76:e6:9d:f1:0d:df:4b:ec:00:9a:
bf:10:5f:2e:19:6d:50:5e:19:47:d6:f4:e3:d8:57:
cd:16:23:98:dc:62:da:91:fd:a5:a3:c3:e4:07:5b:
f8:92:6b:63:68:69:a0:35:be:54:cf:7e:0a:22:56:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:65:6A:16:0D:1B:12:FF:F3:9E:07:B2:6C:D8:C4:2B:BD:07:17:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93932fd5-a431-4690-94d6-ed2f97f585c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:800::/38
Signature Algorithm: sha256WithRSAEncryption
a9:6d:09:4a:3b:7c:43:48:f0:48:ac:86:8f:24:fb:d3:bc:98:
b1:07:7c:d1:69:5e:45:04:33:86:26:da:03:c9:5d:1d:12:28:
b5:83:d7:7b:4b:72:d6:9b:25:3f:43:51:c5:54:45:df:bb:93:
7d:03:c4:f5:3d:82:36:e8:a3:d8:75:7c:4f:e5:b8:64:6a:79:
49:c3:a9:c4:b8:56:c6:f8:6e:3d:66:db:1c:d1:ef:65:51:e0:
e2:b7:13:fc:c7:ce:68:ae:82:f2:f0:c2:09:3d:c2:4c:82:fb:
47:8f:3a:c5:71:86:85:0a:f3:68:17:fe:ba:14:d1:52:57:f4:
fd:7a:36:01:ff:5b:2e:e7:d2:6c:80:91:a1:73:97:ff:f4:66:
fe:cd:9f:bb:53:86:49:30:61:d1:5d:2a:8d:25:d5:ec:a7:30:
81:02:c7:03:69:a3:44:2b:63:cb:83:88:8d:cb:52:d4:cc:17:
34:c8:18:14:89:97:4a:60:34:d6:a8:8e:40:ef:cd:0e:2c:24:
a6:91:71:1c:f7:a0:5b:e1:cd:f9:e9:44:7e:72:d4:a5:81:e9:
14:bd:6e:fd:3f:02:51:b1:ad:04:7d:6c:67:53:4e:af:8e:a5:
7a:a0:84:b4:f4:43:9c:5c:9a:af:53:7d:05:12:c2:b3:8b:57:
0b:ee:4b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:22 2025 by rpki-client