Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
File: b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa (raw, json)
Hash identifier: 9iMzluMK4Di47eVZruzwY5FkWKs9F+XpYooPjcGWDko=
Subject key identifier: C5:82:C9:48:AF:A5:1C:B3:60:B5:CD:F4:5A:AD:E7:1B:FC:3B:40:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4929A398723268F79AE75F10C7EA8E7C0FC4432B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:5040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:29:a3:98:72:32:68:f7:9a:e7:5f:10:c7:ea:8e:7c:0f:c4:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5e2a3f934bcd82d1fd9c130aa7dca53588ac57ece52450aee65908e0ddb1880b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:45:bc:2d:7f:96:5c:df:37:a1:b9:6a:16:
61:06:0c:66:53:cf:d2:f4:6e:f6:1a:1b:ce:21:97:
c6:8f:2b:54:da:b4:0e:cd:2b:28:74:4f:56:dd:4f:
02:42:eb:f3:35:2d:15:43:bd:0f:f9:e2:68:f3:d2:
62:00:1c:ac:b6:d4:10:78:92:fe:41:0e:5b:fb:fd:
cd:98:74:d8:8e:01:88:e7:18:c3:d1:e5:97:87:99:
fd:01:b3:7e:78:e4:f7:63:fc:86:ce:4c:94:2b:27:
4e:99:0d:1f:56:99:70:49:90:b2:26:02:1d:57:45:
4e:2f:a4:a8:34:18:6e:8f:f5:d5:31:ce:7d:bf:26:
e9:75:4d:26:c7:6b:fd:91:f8:35:f4:50:fd:ca:ca:
91:69:a0:fd:10:8c:66:87:b6:99:90:3e:a8:cc:a1:
94:e5:0b:9c:0c:3c:ad:81:2b:3c:3d:48:32:63:21:
37:4a:87:6a:d6:db:e8:3f:12:9e:97:b9:33:7f:93:
80:5c:c3:04:2a:83:99:95:d7:6b:da:d9:32:79:10:
d7:ab:b2:ec:c1:9b:79:c9:68:97:9f:86:76:8a:ea:
27:7f:67:cc:0f:64:db:e7:2c:b7:19:02:83:f3:7d:
27:6a:37:4a:e3:fb:70:c7:bd:64:2e:8b:82:c4:32:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:C9:48:AF:A5:1C:B3:60:B5:CD:F4:5A:AD:E7:1B:FC:3B:40:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5040::/48
Signature Algorithm: sha256WithRSAEncryption
a8:16:31:c2:fc:cb:6f:0e:d9:3e:65:46:08:67:f7:fb:f4:c9:
22:94:b5:61:83:e2:3f:e0:a8:86:20:3d:c7:40:76:d5:e5:29:
35:f2:be:66:b6:d3:50:7c:34:95:15:5e:b9:f2:c3:a3:62:d1:
ec:0d:03:62:02:3d:ed:71:c8:5b:94:95:33:ec:5c:26:da:d8:
da:ff:f7:3c:77:c4:10:a3:64:5c:d9:30:9c:61:0d:2b:76:39:
60:a3:7f:2a:ab:76:ea:77:68:86:07:06:64:bb:98:f6:33:33:
5b:84:58:65:1a:14:1c:c4:fa:19:c5:a4:a3:ea:79:74:8d:6d:
7c:0c:e1:33:9a:0c:d7:51:17:0e:d9:e5:32:47:bc:9a:d1:78:
eb:39:17:d0:c1:73:87:61:ff:0e:d2:70:d8:43:cd:5b:40:45:
2c:77:55:02:1b:4b:6b:35:b2:40:a0:5a:e7:9b:99:c4:ff:d7:
59:2a:77:15:92:81:27:a8:9b:98:13:fc:b5:51:1f:6a:7b:25:
a8:39:93:c4:52:c2:67:53:c7:bd:d9:38:cb:82:eb:d6:44:92:
99:54:3d:59:74:51:41:8e:f8:c7:03:91:a6:33:26:cb:82:35:
bc:03:90:b4:42:28:1c:6a:f4:31:98:a3:05:28:ce:1b:4d:29:
2e:6a:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:06:55 2025 by rpki-client