Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fb96617-2d2f-468d-b766-35c52d9f2681.roa
File: 9fb96617-2d2f-468d-b766-35c52d9f2681.roa (raw, json)
Hash identifier: jNY7sWqxkJAr296s6/fnB+oBkQbjXXHHtp2GpVn9rGw=
Subject key identifier: A2:41:D1:F7:72:A9:0D:F4:5B:4D:6F:93:88:27:86:18:CA:12:4C:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49FE3ECDFB443272655B8EB623CBFA368DC5E657
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fb96617-2d2f-468d-b766-35c52d9f2681.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fe:3e:cd:fb:44:32:72:65:5b:8e:b6:23:cb:fa:36:8d:c5:e6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5cc862fb5145c7a51fde5d5d118434e1129ca25986537826d8409306ccca97e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:92:1c:f0:7d:f4:52:05:14:17:22:9f:bd:
c0:32:15:98:18:91:79:6e:c0:38:14:b2:41:55:f9:
62:8b:78:e1:94:7f:84:c1:dc:c7:4c:41:e5:2e:af:
7c:64:31:0a:bb:56:a1:d2:47:d6:c5:01:b1:9b:97:
0e:a8:cc:5e:15:9b:05:43:cf:3e:02:31:0b:43:79:
6a:ac:4b:d2:f3:cd:52:d0:99:d5:f6:48:a1:97:f4:
02:f3:7f:d2:47:0c:31:a9:f9:60:12:1f:56:10:b8:
0c:f0:8d:47:d2:70:61:7a:71:b1:a6:08:75:c2:37:
7b:a8:65:d9:cf:3f:7c:41:92:0c:b9:d8:8f:23:a3:
92:47:16:61:9e:a8:5d:d2:b4:f0:08:39:02:44:11:
15:9e:ac:35:34:a0:39:37:26:ad:36:74:a7:6f:60:
23:fc:a5:58:f2:55:a7:fd:3f:0a:c2:f3:a2:0b:a3:
0f:b0:81:a3:72:c2:0d:d7:7b:2f:9c:66:8a:75:10:
f6:55:59:d6:cf:20:21:01:29:de:04:74:9c:3b:29:
6f:b1:e2:33:f4:a1:14:1b:0c:32:8f:e3:a4:b0:9e:
60:e3:4f:77:6e:99:fe:d6:9c:32:3f:c7:b3:5b:23:
11:54:35:59:2f:ed:08:36:d1:69:8a:71:1b:1b:8e:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:D1:F7:72:A9:0D:F4:5B:4D:6F:93:88:27:86:18:CA:12:4C:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fb96617-2d2f-468d-b766-35c52d9f2681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:800::/38
Signature Algorithm: sha256WithRSAEncryption
4e:f0:e5:09:4c:df:aa:26:f0:3a:86:fd:8f:9e:da:3c:b1:e8:
7e:86:0d:a7:be:07:36:af:b2:24:f4:a0:9b:23:c1:e4:1c:aa:
00:a2:a4:bd:c6:e3:29:f6:0d:b8:46:a2:97:45:f8:ca:3e:c7:
db:52:d6:c7:9c:cd:c6:43:5d:e9:37:0c:3b:60:87:7d:ec:41:
9b:00:4d:00:a8:f7:01:40:84:de:25:a6:8d:f3:16:24:4a:2b:
ab:26:e1:c7:71:40:ab:a4:49:32:aa:15:31:0c:52:2b:e7:32:
3d:93:18:7d:a1:f4:39:8a:74:fb:00:bb:2d:8f:3b:62:35:18:
cf:96:a6:2f:a8:54:a5:08:fb:3d:02:b6:43:ba:9e:5b:59:f3:
51:24:84:ca:af:f2:65:31:da:e8:d8:e6:7e:70:50:d4:de:33:
e9:24:d1:3c:fc:7b:2c:94:1d:15:0a:92:c6:cb:97:5b:d7:ca:
13:4c:d0:74:cd:88:56:6d:f4:1d:9e:44:52:4e:aa:79:17:c1:
98:b7:47:41:2a:26:cf:e7:27:81:4b:fb:1c:e5:c8:d8:73:ad:
f8:80:fc:d1:44:ef:38:0c:78:50:bd:b8:87:21:9b:c4:a4:e7:
d5:3e:0b:f2:09:c7:10:d2:c6:38:70:7f:09:98:11:03:bb:15:
07:d2:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:19:03 2025 by rpki-client