Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
File: bed4158d-91b8-4ba5-81d9-75a65b550b92.roa (raw, json)
Hash identifier: 1nVuf48C5ld+KYCNA1ggokMa2OIkqdlrSTZ0B3XqTiw=
Subject key identifier: 60:E7:6B:34:86:C2:93:AC:F4:61:CA:6C:EC:99:B4:02:4C:BE:17:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A20BCBD1576DDB0C1227E8DA71B85988D26223B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:60c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:20:bc:bd:15:76:dd:b0:c1:22:7e:8d:a7:1b:85:98:8d:26:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=e141d166f7fa4e88ce988dccc6f13d73071edb065783313232f8442bb6404cb5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:9a:09:ae:6b:27:00:fa:1e:6a:b9:c0:b0:
f7:02:ad:0a:35:60:8c:7f:2d:6d:5c:49:1c:e7:6c:
cb:25:dd:05:ee:a2:98:fa:22:d1:8c:5c:cc:90:15:
8c:d3:16:8b:a3:89:d8:9e:68:b8:18:8a:18:96:c9:
d2:4f:fd:8d:68:39:11:df:96:49:27:61:d2:19:6b:
ab:9c:f6:dd:f2:6d:04:33:60:35:ef:68:33:da:82:
a9:4a:ca:20:58:1e:24:b4:a4:92:06:80:ff:fd:77:
63:ba:a2:2d:4b:31:c5:44:05:98:0e:86:80:05:3f:
3c:28:a3:ca:04:cb:40:eb:cb:3a:bb:1a:be:d4:72:
5a:28:2d:bc:3e:15:c9:eb:7c:e2:21:68:f2:14:f2:
28:40:25:14:6f:6d:06:08:ff:c2:6e:70:b4:1c:69:
40:41:13:05:ee:9a:89:6a:7a:f4:c3:8b:b0:c4:aa:
d2:64:49:7e:b2:57:89:f6:37:e6:f0:f6:f3:d8:ae:
03:f4:6b:7a:7f:1a:94:17:09:19:6c:c9:73:b8:df:
13:f1:83:a5:7d:07:f8:09:58:27:3a:b9:8b:19:96:
09:3d:6d:2b:eb:f8:9b:53:f0:42:c6:72:ab:05:09:
09:75:52:ba:43:5d:45:f8:8b:c8:22:dc:fe:6b:f5:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:6B:34:86:C2:93:AC:F4:61:CA:6C:EC:99:B4:02:4C:BE:17:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
48:d8:98:4e:dd:8b:72:58:59:47:d2:f0:dd:fd:99:50:00:cf:
dc:4d:87:a8:4c:73:99:8b:10:74:37:1f:c3:15:d5:d3:b1:22:
be:f0:a9:68:74:fe:10:1c:92:df:2b:08:e3:b3:69:d0:e5:64:
68:0a:44:bc:cd:8d:fd:01:6b:f3:99:07:b3:6e:ce:bb:87:94:
58:6f:d4:cf:13:fa:e0:fb:97:43:2e:97:09:3f:56:ca:8e:65:
8e:29:7c:24:46:fb:68:6f:cd:5c:8a:dd:56:65:c0:fb:54:77:
e1:09:12:91:0c:68:eb:34:89:6a:a9:32:66:54:3b:b5:5c:10:
62:21:90:52:0d:f1:1b:fb:62:4a:b3:53:a6:4b:65:3a:c8:f9:
60:a8:8f:88:7c:bf:d2:b6:24:75:e3:1d:e2:b5:66:4b:61:b2:
6a:c1:4a:1e:b8:56:df:5f:82:ed:f7:48:09:9e:ed:df:b3:03:
a0:86:e1:dc:c7:dc:3d:17:02:ce:73:57:a3:4b:d7:c3:9c:a1:
a3:b2:eb:5d:4d:14:40:6b:21:61:4e:44:b9:c0:90:54:f9:50:
7a:54:05:21:a7:07:37:e7:2e:b3:52:6b:07:e2:41:99:61:89:
5c:3a:99:bd:4b:50:c4:8f:d2:74:8a:74:cb:7b:c6:89:ca:02:
71:85:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:11 2025 by rpki-client