Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa
File: bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa (raw, json)
Hash identifier: zN5rtMqJaToMwZUNF9hUQDBwO+1cDf2H5KQBOaOly/Y=
Subject key identifier: 0D:5C:07:12:05:37:E0:C7:87:0C:5C:60:AF:24:00:FF:55:5A:AD:EE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BE6F36187B74E22E0FF98001A06B2C36439E0C2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c0c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e6:f3:61:87:b7:4e:22:e0:ff:98:00:1a:06:b2:c3:64:39:e0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7800b7bcd3653774d71b1ce334e39e5cadb3b2ab5274fd0c9ce93da06de023ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:11:18:5d:0d:83:87:82:50:57:d3:e7:ce:
41:0c:64:6c:05:02:3f:2e:b6:cd:f6:a4:51:ab:43:
59:94:38:ce:2b:fd:21:d4:ac:7e:97:50:56:1f:cb:
c0:58:d2:9d:74:d3:5f:f3:99:48:dc:cf:fd:84:f7:
9d:a9:0c:f9:40:64:b2:61:b6:b1:f4:ff:97:cf:99:
50:9e:71:4b:b9:ba:a7:91:57:1f:28:e4:31:f4:95:
94:9b:cc:9d:c6:6e:6e:36:57:36:94:84:9d:0a:ac:
0e:c5:07:d0:02:87:ee:cd:58:59:80:f9:e3:c6:f1:
6b:e4:b5:68:00:10:2f:44:ab:cd:bc:7b:86:c1:de:
94:f3:16:38:03:89:f4:10:73:df:14:b1:18:06:f4:
be:16:af:51:df:b3:28:f5:af:8d:4b:52:2d:4e:b6:
ef:9d:ad:7b:d2:4b:d3:91:af:a6:8f:87:4b:ce:b8:
b7:f1:eb:d3:04:62:51:04:b7:c9:e8:97:4b:d4:b0:
60:28:95:8a:70:7b:ee:f6:85:bd:e5:96:d9:0a:00:
ab:60:fb:df:bd:b4:ee:f2:fd:ed:71:8c:ac:29:d1:
b1:66:24:35:12:7e:82:90:5a:14:86:6a:6b:91:d0:
35:99:b6:c1:df:5b:4b:f3:26:e4:62:f7:ba:eb:76:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:07:12:05:37:E0:C7:87:0C:5C:60:AF:24:00:FF:55:5A:AD:EE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
82:10:d8:cd:01:b0:ae:61:33:bb:6e:2e:a1:cb:ae:47:92:85:
e5:b4:ef:5a:72:37:d4:ff:47:93:90:03:56:b6:ec:fc:cb:cd:
79:61:72:33:06:9a:27:ef:be:75:9c:8e:16:ac:0d:32:5f:21:
d1:7d:6c:b1:dd:f4:9c:d7:0b:c2:5a:ad:dd:18:20:dc:0d:21:
87:85:fc:df:68:7e:17:2c:4b:d6:f6:19:fb:1c:96:59:ef:ca:
27:41:4c:13:90:9b:67:b0:a5:83:3a:b1:2e:b3:38:4f:f7:5e:
8d:9d:12:ab:6b:a2:ff:5c:04:5e:f6:dc:73:17:32:e0:92:e3:
22:03:5c:a0:2d:5f:63:6b:0a:df:0c:6c:7b:e6:0a:1a:06:2b:
20:a3:8f:5b:12:ea:7d:19:ba:b2:b3:cd:d7:a6:58:12:56:61:
41:0e:11:33:70:d2:3e:c6:2e:e4:08:a8:06:f6:63:23:a1:c6:
fa:73:78:81:a0:ca:f1:b7:a7:2e:8d:5c:1a:48:26:02:0a:f5:
cb:7b:8e:0a:b4:26:7b:12:8b:4e:13:d1:bb:5a:c3:8a:7e:8e:
60:8d:45:18:8c:c3:74:75:04:13:ab:e3:ea:08:3d:55:9f:bb:
2c:75:b1:fd:1f:a4:52:19:b5:fd:8c:0c:f6:09:31:60:16:2a:
1e:4e:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:00 2025 by rpki-client