Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa
File: a1796bea-01c9-41b7-b13d-6932c4f36a42.roa (raw, json)
Hash identifier: O1nGOt1rsLlzubmUuGq5vRiYMbXIPlOyeZRKz1Pv7Dc=
Subject key identifier: 66:BF:2C:22:7F:BA:B7:66:CD:97:92:A9:AC:8F:95:2A:6B:44:83:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F9189BDC300067E7DB20CE56076EC4629DFA8D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:91:89:bd:c3:00:06:7e:7d:b2:0c:e5:60:76:ec:46:29:df:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4523fe795499c26d3d5639f8733657950cc87b79157931a58171cbd6e48ad237, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:eb:b9:e6:c7:13:96:53:b1:01:d7:60:17:
5b:fa:dd:a8:16:99:dd:56:2d:55:25:e2:8d:9e:68:
0d:7d:00:f1:7c:da:41:19:8f:a6:f9:28:f3:06:3c:
88:d9:24:95:2c:8e:f8:d9:9c:7b:f9:fd:eb:a6:b6:
28:04:56:1e:84:e4:5e:80:45:29:1a:72:3c:b8:18:
79:de:6d:59:c3:9c:c0:18:1c:cb:2b:ee:fb:5a:64:
4b:28:51:6e:b1:c2:86:19:0d:ef:c7:ff:45:d5:bf:
51:4c:de:fd:8f:31:43:af:2a:2f:d1:29:69:9c:c0:
a2:f7:85:ab:7f:ec:1e:3d:f2:0c:7e:43:2c:39:89:
b9:28:34:0f:d9:4d:ee:13:a6:1d:82:2e:4f:aa:09:
59:49:96:b0:08:3b:d3:d5:37:40:ad:9c:1f:0c:ac:
c8:4d:62:53:f8:87:fc:de:22:1d:12:38:fa:ea:96:
6a:3a:3f:bd:60:52:68:6b:93:fc:30:78:28:6b:89:
b0:92:39:6e:88:22:2e:2d:d5:40:76:f7:12:86:15:
38:f7:b2:a2:08:8e:db:68:90:dd:03:a3:a7:cd:00:
98:3a:03:3e:02:e7:c8:c4:bd:5e:4c:10:d0:01:48:
1b:31:a1:e3:8e:73:88:14:07:ee:5c:34:6f:1c:71:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:2C:22:7F:BA:B7:66:CD:97:92:A9:AC:8F:95:2A:6B:44:83:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:93:92:30:58:3e:75:1a:87:3f:7a:75:ef:f2:5d:26:a8:23:
5c:c2:e7:d3:ff:3a:4b:70:30:49:56:17:99:2f:38:41:30:7a:
af:cd:4c:4b:4c:55:1e:a5:08:5b:52:b9:91:10:3c:17:d5:9e:
46:a2:78:c3:d3:7e:36:49:04:d2:d7:7c:bc:0b:b9:0e:6d:e9:
16:db:1a:68:18:c7:58:df:2b:fc:55:c8:64:70:5e:61:6f:dc:
d5:f0:4a:74:4e:e0:07:ea:b1:1a:fb:9c:37:ea:a5:ab:87:0a:
46:2e:7a:48:93:49:b8:8e:fd:72:56:d5:ce:6c:85:cf:40:e0:
45:5d:88:7b:30:00:c6:04:a1:bc:96:0c:4f:14:af:b1:36:be:
9f:38:16:82:0b:14:e5:a4:29:b6:cc:c4:75:a9:51:7c:63:63:
a5:01:c1:e6:b3:2f:4e:7c:33:7f:80:15:0d:df:b0:30:f1:7a:
e5:24:90:6e:fa:53:db:ff:ab:94:8f:01:79:c3:5e:30:48:85:
f8:c5:11:d2:ac:17:1f:af:53:5d:29:ce:47:5b:7e:57:c4:29:
06:83:c5:79:6a:d7:58:80:0a:95:18:e7:ac:71:20:81:83:9f:
53:66:42:4a:8b:67:a9:eb:61:16:a1:2b:3c:e2:96:8e:bd:34:
0b:e5:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:43:00 2025 by rpki-client