Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
File: 944adc0b-c1b8-474a-8753-f9751b6122ff.roa (raw, json)
Hash identifier: OoELm64IcV5RThrfUAY1BAZjqXqbCOenYaKXUT43mfU=
Subject key identifier: F7:10:A4:F6:31:11:39:F5:4E:65:38:35:04:52:43:04:43:A1:68:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 018CB27F0ABA4F9370D5D51A933FE67088353C95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8020::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:7f:0a:ba:4f:93:70:d5:d5:1a:93:3f:e6:70:88:35:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3e6b8c91b1236a53425a7eff98b7381cff7330c5e03e2a95d662b5c160372348, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:ab:05:3a:45:51:74:cd:3b:56:2f:28:93:
6d:a3:85:7f:bf:1a:d9:81:8d:dc:7f:4e:93:b1:79:
62:67:b3:f6:3d:89:f8:42:6d:1c:bf:5b:29:c1:53:
fa:81:7d:c1:4d:2a:e1:af:9e:21:43:58:78:ec:44:
dd:9b:8c:b0:f4:a6:a0:fd:e8:59:38:d4:45:4c:97:
02:75:0c:c1:43:44:e9:4e:92:43:33:1e:50:a5:c2:
26:30:64:f9:fa:c9:ea:a6:9e:01:4e:2d:2e:00:8b:
11:23:32:72:0d:a0:fc:9c:11:27:6e:fb:1d:f0:5c:
7d:8b:d5:d9:52:a2:11:6b:39:ed:63:26:03:bb:e0:
5e:15:4c:c0:a2:c0:a1:b5:bf:3e:5a:a6:f0:c3:9b:
2a:20:22:f5:92:3b:16:34:29:c5:79:ab:ad:e7:9a:
e2:e4:1a:49:10:82:5f:59:fe:7e:55:b3:86:cc:d4:
c5:03:c8:a1:fe:03:36:d7:3a:fa:c1:1d:3b:e0:24:
6b:a4:2d:09:f1:1a:09:47:49:3e:68:d6:89:d4:b0:
95:85:ab:1e:a1:05:cf:1f:b8:66:a3:be:e7:0b:4b:
4d:71:57:87:71:dc:88:f8:a0:52:e7:c7:ae:16:76:
30:b4:f5:72:15:65:6f:80:4a:5d:04:8c:53:f3:94:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:A4:F6:31:11:39:F5:4E:65:38:35:04:52:43:04:43:A1:68:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8020::/46
Signature Algorithm: sha256WithRSAEncryption
42:a3:41:bd:b5:bf:78:88:cf:80:39:ea:09:ca:c3:89:ab:ea:
dd:53:c8:03:05:e6:f4:dc:c3:ca:3a:32:65:74:58:37:93:8b:
0b:1a:1a:56:4f:9f:50:70:f7:43:6e:d8:b9:34:09:c2:ca:47:
93:01:a3:f9:e7:aa:28:49:9b:a9:dd:aa:27:10:2d:71:b2:2b:
91:4d:49:ff:34:2a:1c:95:54:ab:5c:93:e1:6b:b6:d0:7c:fe:
31:82:38:8b:18:7d:32:54:f4:1d:80:53:5f:92:29:fd:cc:1a:
81:bb:7d:ed:54:c2:aa:55:bc:8c:cb:28:43:e2:37:b0:64:f7:
1f:ba:f5:a9:52:91:c4:e2:b1:0c:38:ec:a5:a5:cb:c5:ee:de:
63:2c:57:d2:ee:8b:ed:09:8b:4f:a5:f4:50:9d:60:cb:e8:0c:
36:ab:b1:12:aa:99:57:22:23:d9:47:da:6d:6d:87:bc:01:1a:
5e:cb:8e:be:b8:a4:f6:f4:7e:6b:0e:31:5f:f3:ef:9f:db:95:
ec:4e:70:2e:f1:e8:e1:87:a8:df:cc:1f:f2:87:83:a7:79:3d:
15:e8:0b:82:3d:f7:4a:0b:11:58:63:f6:6c:fa:8f:f7:2c:f5:
fe:42:87:f1:33:56:15:7a:98:41:ac:19:cf:1d:07:0c:b9:6d:
b2:97:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:59 2025 by rpki-client