Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
File: be610cc2-170e-494b-b1f3-db73bc5ff027.roa (raw, json)
Hash identifier: VaBWFzQUR4wXweCInaC1wB7vriW31L3AF3piIZpimac=
Subject key identifier: D6:73:F3:BB:12:08:49:8A:33:19:9E:EE:6A:BD:1F:23:BB:26:05:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42FDAD6B20C73323296CEFFFE8174E4CA8BCE7CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fd:ad:6b:20:c7:33:23:29:6c:ef:ff:e8:17:4e:4c:a8:bc:e7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3bafd38a5ac0711c8f9cc4de4033e4ac0cc38367a7b4b20c490e1ffe4c688324, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:48:c8:1b:08:30:cd:38:70:f3:2c:68:75:
88:de:6a:81:8a:4e:49:14:77:7a:db:c0:2c:5d:c5:
52:43:76:e3:5b:b3:33:ee:c3:6a:61:a7:2e:08:4f:
1e:35:d2:03:6e:6d:7e:54:6d:51:fe:92:dd:99:b8:
ef:73:39:85:4b:64:52:02:8f:86:6f:69:f8:75:b6:
5e:34:49:0d:31:ae:3e:94:ad:1d:75:66:21:16:b1:
cf:69:15:1a:81:36:18:4b:34:3b:b6:10:d5:89:4b:
e5:1d:f3:db:86:d4:9b:35:ca:d7:70:16:2e:ed:66:
7d:1b:dd:21:6e:a0:da:de:2c:cc:67:36:bb:5e:b9:
57:bd:2b:30:3c:cd:8d:92:92:2f:f3:00:11:dd:0f:
df:db:17:97:90:12:e9:52:3b:20:6c:b2:99:2c:58:
3e:91:6c:aa:e7:1f:46:20:eb:bf:7d:6d:22:7a:ec:
b0:7c:af:36:fb:b4:b4:6b:8b:50:53:27:fb:4d:25:
b4:19:12:1b:16:46:07:6e:e1:5f:e4:0d:2b:13:5d:
89:e9:d7:fa:ac:0e:79:47:d6:3d:4e:86:00:8e:8a:
94:8c:4e:74:46:6b:d5:3d:fe:cf:3f:53:22:ec:0e:
47:7c:95:24:90:16:5b:60:21:75:d3:dc:c8:9a:c3:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:73:F3:BB:12:08:49:8A:33:19:9E:EE:6A:BD:1F:23:BB:26:05:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6080::/48
Signature Algorithm: sha256WithRSAEncryption
b7:93:74:20:45:84:90:c5:e6:4c:b1:50:b4:cb:52:d2:b8:e8:
db:75:ad:b6:ab:9c:cf:fb:04:21:71:d6:c1:56:bd:f0:96:f0:
ac:73:c5:df:77:ba:74:13:90:0e:fd:bd:0e:37:e4:69:be:79:
13:95:30:98:cf:2c:7e:65:70:f2:c1:00:b5:4d:a3:c4:1d:44:
31:52:b2:1d:c1:33:ac:1d:5d:7c:23:aa:2d:49:cc:e5:22:2b:
bc:82:f2:e3:f8:81:8c:8a:68:7d:3e:0f:7c:31:4a:6b:9e:a1:
89:c9:5b:15:7b:49:db:a5:2c:01:46:a7:bb:56:68:0c:c6:20:
25:a4:db:3c:2d:72:53:5f:bc:77:35:ac:fb:d5:30:10:2b:07:
08:89:6f:17:c7:8f:f5:d3:a9:5a:04:46:af:f4:06:61:3b:46:
de:c7:f7:15:f2:29:18:03:fd:4e:db:fb:e8:86:0c:11:8a:d7:
59:2d:48:ca:84:85:ee:ba:c3:bb:54:d0:d0:b7:67:cd:fb:91:
75:3d:bc:b4:58:d5:92:d7:c2:28:e9:a3:80:02:5b:dd:8c:18:
14:80:75:47:9e:2e:0b:f6:57:74:f3:16:5c:70:5c:4f:4d:f0:
e3:19:3d:7f:42:52:f4:e3:8e:a5:f3:c4:24:a6:7f:4f:19:3f:
15:b0:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:59 2025 by rpki-client