Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
File: ad017d4e-10ed-4706-a728-1b3d3feae80f.roa (raw, json)
Hash identifier: ckXiNvEBr4imCmkxG7TQiYQsLM8rm1jJS4bXTtPzxbU=
Subject key identifier: 27:98:2C:DD:E4:A1:67:31:73:2F:C6:1A:37:1D:C9:B9:F9:4E:84:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11F3E5EBCA24D406A08106C5EA61D35723A9551F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f3:e5:eb:ca:24:d4:06:a0:81:06:c5:ea:61:d3:57:23:a9:55:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=f04ab15dfef182fef645a17cde2603b0bcec313ade4f1c09117d07f94566695f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:b3:b7:f8:82:a9:d6:0c:57:a4:74:94:e7:
1f:45:5a:6f:3a:01:77:f0:f2:c3:a9:6e:e7:81:92:
72:b8:29:d1:e5:45:2c:86:6c:0f:4d:20:1f:c6:9d:
f1:5f:a2:70:23:13:bc:af:31:ad:c3:d4:51:67:17:
3e:44:d4:d0:36:77:1d:e3:dc:ac:c5:dd:2f:14:1f:
44:47:cf:ea:e6:a3:49:e6:44:ff:c9:27:60:ef:db:
75:1d:97:8a:1d:40:bc:3c:74:22:6f:4a:17:de:fb:
8d:e0:bb:b9:23:88:d7:0a:9e:da:d5:cc:b6:21:d1:
a3:33:e2:6b:be:98:dc:18:eb:07:f4:95:7b:86:2f:
3b:93:34:f7:7e:46:a2:48:fb:27:61:ec:bf:e5:b1:
ee:3c:1d:97:ea:54:72:e6:05:5a:90:f7:ed:26:ea:
81:54:f4:c4:52:7f:fc:d6:0b:ef:4e:ab:72:a4:5f:
dd:7b:8c:d2:81:36:5c:f9:2b:c3:f2:ca:53:23:6c:
f2:3c:8e:f2:29:c0:b5:3c:6b:1e:76:72:b5:01:15:
17:47:dc:b0:d8:89:e6:86:e8:57:80:24:24:56:e9:
df:45:44:d4:9f:b9:11:eb:d2:19:d0:b2:b4:a7:c1:
a7:57:78:af:fd:cb:9b:59:4c:3b:ed:f0:5e:3c:34:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:98:2C:DD:E4:A1:67:31:73:2F:C6:1A:37:1D:C9:B9:F9:4E:84:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
38:47:ff:95:09:6d:90:b7:14:17:f8:f1:a2:dd:63:f8:2b:f9:
4e:fd:ba:60:38:80:b0:26:d0:c6:97:c5:c8:f5:ff:ce:6a:b2:
3e:77:7b:db:f6:b8:d1:99:81:8a:b7:e5:ff:28:08:07:2b:cd:
5d:37:55:0b:99:d5:31:6f:6e:04:63:21:0d:aa:f1:23:4a:9f:
8b:0f:29:ad:0d:6b:9f:12:ea:bc:81:95:dc:ed:f4:8c:bd:c6:
12:e6:62:77:c5:4f:4b:a7:17:2a:dc:22:f1:93:df:65:d8:65:
a1:fa:fb:33:b8:49:66:bf:b4:33:a4:f2:d1:0a:7c:bc:24:fd:
db:ab:f7:9f:4a:ac:d0:db:a8:cd:c0:11:d6:c3:95:62:db:51:
83:73:18:80:14:d1:88:59:d4:52:2c:d2:8e:bb:6c:70:9b:ad:
a4:dd:e7:be:c1:e8:ac:ba:49:ee:3d:ee:98:8a:fc:07:ff:9f:
5f:b8:81:b8:ba:a8:74:22:b0:69:a7:27:2b:a0:e3:bd:c9:8e:
2a:f8:1d:a7:44:c3:f6:ef:9d:72:3a:a2:16:99:c2:5c:7d:10:
8b:f4:62:cc:2a:62:fa:90:1e:75:41:ae:6f:54:78:52:cc:d2:
14:a6:84:7a:8b:c3:5e:a6:18:1f:bf:37:22:b8:2e:40:98:97:
40:7f:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:48 2025 by rpki-client