Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
File: acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa (raw, json)
Hash identifier: gE9HpUzutS4/Pye0YFwovpn7IpdwNqEDcHqDrIiUgvk=
Subject key identifier: 57:88:28:DE:44:8A:46:5B:C0:AF:24:1C:7E:38:13:01:2F:6A:35:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CC9ED1F683316B161EC92A2EA7FE36F779F2626
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:6040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c9:ed:1f:68:33:16:b1:61:ec:92:a2:ea:7f:e3:6f:77:9f:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c6025fcf7bf16ae9a1e851634f5afc3d9276e3139b05ca66b28a16e6b1affb45, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:ff:5b:06:aa:04:9d:23:7b:2c:de:f4:84:
f1:ff:90:71:9e:67:3d:46:86:a1:97:42:62:6c:29:
f0:2c:b9:15:5f:ab:cf:84:dd:06:93:9a:f1:4f:5b:
7a:88:8e:3d:fc:68:24:98:f4:50:62:8a:79:9f:26:
7c:bb:7a:cc:3a:bf:0e:61:38:4e:80:9e:aa:d0:93:
a3:21:dc:d8:d1:1b:56:39:78:90:e5:15:9b:db:26:
36:50:e6:20:6d:cc:ca:ff:bb:0b:9c:5c:38:d2:5c:
ad:11:22:34:2f:a2:11:18:e8:85:3b:1b:a8:0b:f9:
c3:2d:0c:cd:2d:dc:6c:a4:5c:38:a3:43:55:b0:cf:
a1:7c:3f:1a:66:6f:1b:23:1c:0c:a0:8b:19:dd:0e:
ef:33:66:6c:55:eb:4e:99:36:83:16:48:7c:40:18:
5b:5d:6a:e7:a8:8b:b4:72:d9:b3:2a:d4:a2:71:01:
86:44:f7:fd:92:4e:60:53:93:f2:b9:a5:21:cc:d6:
92:d5:c2:11:4c:06:b1:99:35:0d:52:ee:7a:99:60:
4b:83:59:43:19:ee:06:de:ad:dc:fb:b7:16:b8:01:
de:51:f0:2c:4d:c8:97:f9:60:7d:9c:f1:d4:26:9a:
ff:c1:d4:07:ee:4c:c2:3b:2a:96:7c:d7:9d:04:d2:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:28:DE:44:8A:46:5B:C0:AF:24:1C:7E:38:13:01:2F:6A:35:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:6040::/48
Signature Algorithm: sha256WithRSAEncryption
74:d5:15:48:d9:ba:a8:f9:b5:d5:c9:b0:32:81:a3:86:c9:1d:
21:13:82:41:6f:ad:56:5b:e3:b2:d9:ff:d1:3e:89:a7:4b:e3:
ad:eb:ed:7f:73:7a:ae:86:75:41:87:57:88:99:5b:34:7d:21:
80:ee:65:99:53:4c:9a:1c:27:59:cb:4b:99:34:25:c9:16:24:
df:6e:33:33:bb:fa:bd:cc:60:6f:4e:a3:0b:02:f4:19:0e:62:
fd:dd:98:4a:b6:c7:71:a0:f0:28:1a:fb:a0:20:0c:2e:5b:f8:
49:d9:4f:7b:46:45:37:e5:f8:91:1b:9f:a5:4c:ad:ec:17:8d:
40:77:00:20:2b:aa:c3:d0:8e:75:f7:a7:be:6d:68:c1:5d:58:
5c:77:7f:79:7a:a6:2c:83:83:02:69:cc:dc:c2:22:8e:f0:fb:
10:20:ac:c5:32:f7:c6:64:c8:a4:8e:f2:42:01:83:ee:4c:ba:
f8:43:b3:c6:44:d1:f8:fa:a4:37:d3:d7:7f:e7:3e:b2:0b:a0:
33:e0:85:14:d4:02:a7:4f:b8:74:d6:e5:76:d1:af:fd:8a:51:
2a:66:2e:44:d4:f9:62:2a:69:20:09:d1:f4:c2:cd:23:e7:30:
a9:eb:4f:ce:98:b2:52:c1:bf:77:01:7c:16:61:98:00:90:b5:
55:e0:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:38 2025 by rpki-client