Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
File: 93c73d28-6ada-4f65-bb8d-8fbee434c001.roa (raw, json)
Hash identifier: z3HrXiw3R6dVHY7NsJkRFZKeFFY2baJapKw2SJBZUL0=
Subject key identifier: A5:F0:A0:1E:51:27:F7:C7:F6:BC:6F:42:27:53:9E:67:F6:7A:88:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05939F7E8B742BC2F4F94F2799984E0C33C90D23
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:93:9f:7e:8b:74:2b:c2:f4:f9:4f:27:99:98:4e:0c:33:c9:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ba2265c7eeaef2e81898f214bcaa170c41d33e082d25c4910b2f6bbf79a5bf75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:b3:c1:46:cc:67:0a:f0:90:0d:d4:b8:3b:
63:03:9f:29:9d:93:a0:81:40:b5:25:9a:85:87:3b:
c3:bf:89:17:6b:11:9f:4a:e4:ab:4e:be:92:0e:8f:
1f:eb:43:34:f6:b6:a4:90:6e:f2:81:12:01:12:17:
3c:ef:48:f1:c2:16:75:93:f9:d5:49:b8:c5:ae:7d:
6e:8c:1b:6e:62:c8:1a:dd:cc:bd:2c:ab:55:18:7f:
59:55:0b:c4:ab:61:4b:66:d9:02:10:44:05:a1:ff:
01:b0:f8:b3:41:8f:0b:48:1a:95:22:4a:ed:8b:11:
21:f0:0a:bb:1a:19:0f:de:28:b7:3a:19:b3:85:3a:
a5:c4:5e:1e:b4:a7:89:ca:a0:2e:46:db:4e:6b:77:
79:3e:37:32:4a:60:fb:02:f2:20:38:f6:7f:41:3b:
49:d3:15:6e:25:ae:fa:c8:ac:27:1b:3f:3e:e4:38:
6e:bc:f9:77:36:ce:48:87:0c:03:8d:b2:28:5b:a0:
64:49:68:6f:b5:4b:53:7e:3c:70:10:4e:5e:26:63:
e6:ac:2d:ad:9f:34:76:b3:ca:0a:12:f1:ed:5a:68:
42:7d:55:ff:ce:7a:83:41:d4:97:14:c8:2f:62:6c:
6c:5a:cd:51:fd:e8:42:5f:10:31:89:f2:bf:17:72:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:A0:1E:51:27:F7:C7:F6:BC:6F:42:27:53:9E:67:F6:7A:88:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:400::/38
Signature Algorithm: sha256WithRSAEncryption
a8:c3:e4:d7:aa:a4:e5:e2:7a:1d:35:f3:e0:57:34:db:46:b8:
13:9a:8c:5e:a8:c8:66:1c:da:09:92:e0:41:43:bf:08:8a:42:
7d:d1:c4:d8:f8:35:53:2f:78:61:a8:8c:09:83:23:69:f1:d9:
30:54:0d:a1:6e:8f:a8:d7:85:35:38:54:a2:74:47:5b:e2:97:
62:bc:fa:3e:b9:db:4c:09:4b:99:89:37:f4:52:88:75:1c:aa:
5a:3e:35:c4:50:f6:47:eb:02:90:36:0d:38:47:d6:24:51:04:
88:8e:96:c9:69:d1:25:56:bf:cd:92:67:03:72:4b:b3:a5:8d:
51:0e:6b:eb:3e:84:00:ad:9d:7b:0b:4b:e0:63:2d:11:c9:44:
0e:41:26:60:7e:1b:dc:3f:35:54:c3:4b:d2:9d:32:52:bc:1e:
a4:7a:d3:f7:e1:42:e9:f6:c6:42:69:e2:d8:ec:c4:2c:e1:5c:
15:56:6e:a9:34:a3:ea:03:66:99:74:51:a6:ac:ca:71:d1:3d:
e4:b3:f7:ce:28:5c:ae:3c:59:75:f9:0a:20:4a:bc:d4:13:f4:
9c:b0:ac:8c:fd:7a:0a:01:fc:9f:0b:da:55:e3:8e:0f:e0:ed:
37:11:07:2d:39:c2:ff:d4:8d:b1:f5:9f:27:dc:7e:c4:c3:f1:
24:b8:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:58 2025 by rpki-client