Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
File: a96d9971-6d4e-47a3-9408-d633699b643b.roa (raw, json)
Hash identifier: A5wjrVS7XviD1rWeoHwSLDx1hmPSeN56KMJndtWdfJY=
Subject key identifier: 29:C6:05:7D:62:38:64:7C:A7:B8:92:E9:DC:3D:78:89:F2:6C:B0:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DCA43744BA7C360E9AE6D2F3BCDEB4ECB04AFCA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ca:43:74:4b:a7:c3:60:e9:ae:6d:2f:3b:cd:eb:4e:cb:04:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=41d62d633c9441d7190ea35b98d94d647b7aba302a0d4cf9dba90f1147baae77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:51:24:ea:df:bf:19:a4:e0:03:a9:c4:ab:
c7:f5:19:86:fd:39:51:ec:44:80:cb:d0:0b:68:78:
6b:dd:98:5d:17:5c:3a:7a:31:e1:f0:41:32:fa:6d:
a0:f4:d9:8e:81:33:ce:9c:b1:8b:d8:c6:a4:8f:c7:
56:11:53:8a:3c:dc:0a:01:a7:40:87:b6:b8:10:08:
d6:ca:98:71:51:74:43:bb:13:e6:23:0d:c7:95:99:
21:3d:77:6e:83:29:7d:f9:bc:27:2c:7c:b9:67:a9:
d4:c5:49:cd:f1:7b:4f:4f:c8:03:75:83:36:8b:2f:
f3:23:96:e0:30:bd:b3:a6:b3:8f:8f:2a:60:7c:4f:
c5:ce:8c:80:02:1b:94:4b:98:49:4e:a4:ce:fd:3a:
42:c1:e0:e9:4b:3f:50:d1:c1:d0:bd:c7:9f:bf:ab:
46:56:c0:5a:61:f0:87:4b:5f:21:73:05:d7:cd:7d:
40:80:fd:07:c7:6e:36:8e:a1:92:81:fb:e7:5c:83:
07:c4:47:09:93:50:28:22:0e:31:b2:ee:81:f9:2a:
f0:d7:47:38:05:50:b2:69:67:15:7b:5e:58:15:80:
17:8b:ae:9d:23:f8:c5:f0:0b:38:66:15:76:e9:5d:
0d:d3:74:ff:fb:60:05:75:17:ec:66:4f:5b:36:03:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:05:7D:62:38:64:7C:A7:B8:92:E9:DC:3D:78:89:F2:6C:B0:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:2000::/40
Signature Algorithm: sha256WithRSAEncryption
95:cc:9b:3d:1a:94:e8:69:a7:87:ff:28:6d:08:24:df:17:42:
95:44:cf:aa:01:d6:69:1f:e1:af:85:35:05:25:5a:cb:5f:61:
0c:14:a5:41:d6:5b:7e:a3:8a:22:70:41:73:7d:1d:4b:97:55:
fb:4c:03:c3:c3:f0:af:63:66:5c:97:8f:f7:a0:cf:32:02:d6:
45:a4:07:da:71:1d:b7:f9:9f:9c:83:67:9d:0d:02:28:38:b3:
25:e2:25:47:5a:12:07:f7:75:cd:d6:00:af:51:3b:99:38:47:
38:bf:77:ce:5a:0e:38:55:6e:36:da:17:0f:8d:52:81:84:44:
c6:bc:2e:c9:e9:d9:21:68:9d:37:06:03:61:f9:b7:84:a9:3e:
8b:86:9d:87:b7:a9:34:14:f5:0d:9c:d9:b4:14:e9:24:6a:27:
d9:ec:06:73:7e:b0:4c:fb:47:74:74:64:ed:a8:99:76:2f:fa:
3c:1d:78:be:94:0e:ce:88:c6:23:3a:ca:e1:38:eb:d1:7b:54:
a7:9c:90:62:35:21:db:43:6e:69:3d:b1:5a:c7:0f:07:28:bc:
74:41:8a:64:e9:e3:6b:00:84:93:4b:3d:5e:e5:cf:59:f4:fc:
43:b3:e5:1c:0e:06:69:f0:2c:4d:02:b3:f9:1f:a9:9f:9c:90:
93:30:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:07 2025 by rpki-client