Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
File: 9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa (raw, json)
Hash identifier: LTC2W0w1de9XJSVUYwyTpSB22hPdh4JIGpgwGPmCU6U=
Subject key identifier: 42:A7:89:07:C8:D6:A3:5B:03:80:1C:FD:8C:68:71:02:26:D8:21:9E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C3C2B861A9719D6EBAEDAC2DF6FC63CC07B5111
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3c:2b:86:1a:97:19:d6:eb:ae:da:c2:df:6f:c6:3c:c0:7b:51:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b264688f56e1d8d630a817e56a54dcfdf94b09993f3fb1389419197ec64dc57a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:6a:f8:cf:54:be:7b:80:aa:5c:71:59:09:
19:34:55:d9:6a:d7:2f:69:f4:dc:3c:a3:27:e2:ec:
5d:b6:0e:6b:41:22:83:29:b5:cf:ae:e6:06:c2:17:
15:cd:ed:f6:d5:6c:c3:6b:90:fc:01:63:4d:78:f9:
84:52:05:08:d1:2c:8a:2c:be:34:63:91:0b:69:21:
38:25:5e:01:33:03:18:03:03:44:30:5f:d2:61:94:
b4:91:66:87:f6:41:f5:d9:09:91:3e:87:e6:4d:36:
71:ca:18:e5:74:50:b7:e0:f5:87:40:63:68:c7:a9:
93:1b:a2:39:d5:e8:54:a8:fd:97:2c:62:93:d8:be:
2a:8e:da:11:f1:c6:82:3f:49:9e:42:dd:a4:d8:f3:
54:b9:30:cc:06:4e:4f:bd:ae:47:1b:39:33:0c:d7:
5c:80:79:54:db:ad:e3:4a:36:04:3d:6b:57:58:f1:
4a:5a:5d:a4:bf:69:3d:7b:74:a9:93:56:d9:dd:0d:
4f:11:30:3f:8f:f3:8a:53:2e:9c:66:ca:6c:b0:ad:
53:10:5e:2c:1e:4e:c5:3f:62:db:08:d7:22:a2:aa:
b9:50:2a:3d:77:02:0d:c7:9e:7c:b9:1d:84:d4:94:
f7:77:8c:2a:71:87:5e:11:d2:a5:a8:2f:ed:25:d5:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:89:07:C8:D6:A3:5B:03:80:1C:FD:8C:68:71:02:26:D8:21:9E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011::/36
Signature Algorithm: sha256WithRSAEncryption
01:51:76:4f:06:1e:90:35:28:75:a0:b1:99:d1:39:e8:01:29:
55:ba:06:8e:1b:ef:9e:ae:a3:23:87:3d:72:5a:f9:54:1c:76:
df:d4:b6:13:de:5d:1c:71:77:7d:8e:87:ff:68:83:a5:bb:0b:
ce:4f:f0:b3:30:09:69:9b:f3:9c:65:48:df:41:9d:5d:fe:49:
7b:5a:bc:7f:82:86:b2:53:32:e1:19:3c:54:4f:70:04:f5:a0:
91:61:cb:1e:01:cc:26:8e:c8:3b:f1:08:3a:35:7e:99:d7:79:
2e:82:1e:7a:66:a8:9d:ad:7a:ee:2e:e0:96:22:1b:55:86:b6:
8b:60:0b:da:74:ec:aa:68:6c:4f:fe:a2:18:2e:05:92:07:76:
b9:49:17:9e:c3:38:7d:a4:08:fd:bb:36:84:4f:5b:f8:a2:0d:
e9:cf:a1:ef:c6:e8:9a:c6:8b:c0:65:44:19:fe:bf:fe:51:fe:
14:60:ae:e6:08:d8:fa:39:47:16:e8:32:4c:61:64:db:76:4d:
62:0d:30:8c:0f:01:31:08:7d:92:0a:41:6c:e2:6f:7a:14:b9:
19:19:f6:7b:23:01:d7:92:ea:2f:70:a2:6a:93:dd:f5:3a:6b:
09:29:11:de:de:6e:98:7c:39:37:1d:b0:60:18:bc:0d:a0:40:
f1:57:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:03 2025 by rpki-client