Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1730a2-bb63-4a94-80ae-e84acdef93b2.roa
File: ab1730a2-bb63-4a94-80ae-e84acdef93b2.roa (raw, json)
Hash identifier: KM9G3p1chtqVfmq8i49sDJP9ir+rT2tyeMUgEs3TeFk=
Subject key identifier: 22:C9:C2:1A:21:0D:E4:2B:2B:11:D2:6E:E9:B4:EC:50:3B:19:46:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56995160DFF507F082FDFFE1121D91DE59E98478
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1730a2-bb63-4a94-80ae-e84acdef93b2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:99:51:60:df:f5:07:f0:82:fd:ff:e1:12:1d:91:de:59:e9:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0927d48b4f8f4e83b50e80a04972fa063165b869509a918c29c83ecbe19caa00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:19:e5:52:78:dc:f4:79:7b:de:c1:41:98:
df:ef:67:fb:86:7c:63:59:05:77:c2:e7:ed:d9:9d:
f7:01:2a:27:f4:97:d8:de:75:41:43:f2:43:93:fe:
02:88:a7:28:b3:f7:f2:0d:ae:53:b5:50:c9:70:5c:
89:1e:2b:31:7a:20:3a:72:75:70:de:80:80:8a:f3:
e9:a6:91:95:b1:0c:51:c5:7d:c1:50:a9:96:ae:58:
18:24:73:20:e5:ad:df:85:41:90:34:b5:f4:16:74:
73:98:72:21:ee:d3:3a:9a:7c:37:fb:de:96:1c:43:
75:0e:7f:84:c2:f8:ae:f5:43:7a:ff:2b:51:7c:c0:
f5:a5:96:ce:2d:e4:d3:2c:a2:d5:dd:e1:ba:d8:34:
06:bb:2f:0f:9c:99:e5:38:00:a1:e3:f4:c8:16:17:
22:f4:5b:5d:d3:8b:48:62:ca:34:66:d6:1b:b6:53:
5f:6f:82:b8:8e:31:69:ad:ab:88:93:02:14:92:bc:
7f:7c:d4:61:7b:34:63:de:8c:3c:dc:94:68:b6:0d:
63:f8:62:bf:13:d1:d8:f7:95:65:9c:e6:70:0a:2e:
c5:20:f5:f4:82:a9:d5:32:84:e5:61:82:ba:bf:7f:
53:d2:b0:fb:50:6a:35:f5:cc:96:8b:54:6c:f6:63:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:C2:1A:21:0D:E4:2B:2B:11:D2:6E:E9:B4:EC:50:3B:19:46:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1730a2-bb63-4a94-80ae-e84acdef93b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e040::/46
Signature Algorithm: sha256WithRSAEncryption
8d:c7:fb:55:08:47:64:28:4e:cc:6d:c6:1f:0d:95:b8:59:43:
22:cb:c3:07:ed:e4:4d:d2:c2:7f:13:d7:29:3f:73:d9:71:ba:
a8:cd:bc:4d:fb:88:35:f6:80:b2:68:fd:94:ac:2c:74:a0:6e:
c0:68:56:e7:52:d3:51:7f:d7:09:0f:5f:4c:78:5e:4d:72:41:
6d:46:5c:48:75:ed:a1:5b:fc:ce:ad:69:ea:5c:4e:48:c5:ae:
cc:7b:ab:2c:42:f8:56:48:94:1a:c8:9e:8e:31:55:55:34:3f:
31:25:d3:6b:7d:82:9d:4a:7b:6c:4c:3e:13:e6:e2:ee:22:3e:
01:4a:cb:c3:97:d8:ce:95:df:d2:46:1e:74:e3:68:34:77:d5:
be:43:66:51:68:a4:ac:21:5b:72:a8:77:12:c5:8c:7f:a5:6b:
58:a5:9f:48:8e:8a:ac:41:d8:4c:72:08:00:3c:47:01:db:da:
23:45:36:4f:ef:b9:5c:c2:1d:52:32:5e:7c:e0:0c:eb:63:11:
40:06:47:c8:0a:ba:62:b0:c1:6d:5d:05:05:a2:a2:b5:3b:ee:
d8:39:c5:d6:f0:f6:f4:90:10:e8:b3:b4:ea:e5:47:b4:c3:e0:
be:5e:e7:49:e0:bb:5f:ab:64:c1:33:0e:a7:7f:57:ca:52:58:
0d:35:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:48 2025 by rpki-client