Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97535b7f-b66d-439d-9398-8336783c9ea4.roa
File: 97535b7f-b66d-439d-9398-8336783c9ea4.roa (raw, json)
Hash identifier: VVzXgoDmdJfJC5YXsrapRC/pIVmXsCcbDjyj/PnzNf8=
Subject key identifier: BB:1B:7A:68:81:66:F5:C4:7E:58:94:71:A2:A3:DA:67:27:40:71:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CA3C7C310FF89E0CD261DDD14BDA64AFB833E04
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97535b7f-b66d-439d-9398-8336783c9ea4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a3:c7:c3:10:ff:89:e0:cd:26:1d:dd:14:bd:a6:4a:fb:83:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=05fc3163bc157ec3946e44fa56d4411fe0ab1bb1ada3155a546d435c2679b4a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:b7:f3:e2:ae:ca:9b:06:3c:08:73:e2:5b:
cb:54:29:ee:63:ee:b8:7c:65:78:65:50:38:62:1f:
cd:6e:37:ff:71:77:33:1d:35:24:de:4d:83:a5:66:
da:77:9e:92:76:14:80:3e:8b:f4:3d:af:50:dc:fc:
56:a4:fd:20:9f:5e:7d:71:73:17:7b:16:82:df:a5:
fb:09:21:a8:8d:f1:de:9c:ec:21:97:b8:bb:30:d9:
3c:94:8f:a2:3b:43:6c:02:b0:68:03:42:e3:80:7d:
bd:9a:e7:bc:9b:d4:ff:29:32:23:15:a7:44:aa:c2:
77:cc:b4:10:e1:ed:1d:09:58:f6:5b:71:7f:44:b8:
6f:24:70:45:de:d0:98:bd:db:11:97:81:16:7b:b0:
21:47:ec:0a:5c:1c:46:07:09:9e:85:91:ea:74:9f:
a7:9e:f4:80:1f:fb:3d:d6:90:72:be:3e:b1:9e:62:
11:f7:6d:31:33:d0:0d:55:65:8f:70:7f:f1:be:75:
a7:32:9d:71:96:ac:39:61:c8:e6:0c:bc:ef:a7:da:
c0:27:6c:12:93:44:de:7d:cd:9c:b7:4c:2a:59:df:
d3:2f:ea:c9:38:99:3e:32:c1:d1:a7:67:c7:cf:0c:
a4:80:5e:bd:83:73:e3:4c:e4:53:0a:52:0d:06:9f:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:7A:68:81:66:F5:C4:7E:58:94:71:A2:A3:DA:67:27:40:71:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97535b7f-b66d-439d-9398-8336783c9ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5040::/48
Signature Algorithm: sha256WithRSAEncryption
0f:5e:7f:79:4e:4b:f1:f2:b7:31:e0:a8:11:6c:82:cd:e9:73:
74:3b:4e:9a:5c:8c:6e:de:9f:79:ee:ff:c0:0a:da:f8:c9:c3:
b2:75:2b:88:5e:a6:ea:34:83:e9:1f:0c:09:2f:96:73:ee:34:
84:bb:fc:40:ff:42:a0:dd:66:45:7c:32:ef:8d:7d:54:1b:42:
d7:35:a6:98:cd:2d:1c:4a:7e:31:9f:89:38:3e:0c:5a:37:78:
53:0c:c4:81:b1:db:8a:87:38:66:e7:db:bf:e6:4b:26:4f:fe:
f7:6f:28:51:98:69:11:83:bf:22:c3:ab:a8:c8:d6:12:52:c9:
ab:3b:8e:c3:92:cf:7f:a9:a4:aa:7f:cf:a9:38:58:ae:f5:b7:
d9:ab:30:69:e2:3e:5a:9b:f9:6e:2b:ee:c8:c1:79:68:f5:41:
0e:c7:51:a1:c1:d9:50:fe:83:cd:b7:b4:7e:91:29:b7:4a:83:
f3:b9:bc:91:93:43:16:9e:bd:73:f7:b5:f6:23:57:85:61:11:
75:05:c5:0c:04:92:61:75:c8:c5:c6:39:be:2c:2e:21:b3:c4:
d7:95:6a:8b:b8:d2:89:f8:12:61:fc:40:ff:19:49:b5:99:85:
90:71:92:a0:b6:02:cf:7d:25:9e:49:d0:a2:1b:7f:ed:0d:8d:
d1:34:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:19:32 2025 by rpki-client