Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
File: bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa (raw, json)
Hash identifier: 5jplMKN0F6Kmfuvan5LWNgDTIZKKKaP8p7whOz8C0Jg=
Subject key identifier: E6:A3:94:F6:9C:29:5D:58:89:73:F9:7F:C9:58:D7:CA:45:54:1C:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0BB426EB48E6527FB7258BBF56BD46D55FFEBA90
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b4:26:eb:48:e6:52:7f:b7:25:8b:bf:56:bd:46:d5:5f:fe:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b68d7d48a638adffde421c30c0dce1f2c4b5cbb9bd106a726b69475f9521a9a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:14:5a:10:05:ed:8d:33:b2:38:56:9e:9d:
9a:5e:4b:f6:fe:ce:c0:81:98:7d:b4:c7:dc:ce:df:
35:8b:e1:3b:66:5e:d1:06:8f:c2:5d:78:5c:75:06:
a3:f3:e7:14:b8:9e:e8:79:fa:ce:75:e1:7d:c6:dd:
44:de:c5:26:ec:34:58:2b:0d:de:df:e7:f2:3b:d7:
03:4b:7c:4c:10:51:21:64:53:a5:22:06:04:8d:79:
54:0a:7a:1c:fa:bd:b6:a7:97:d7:ca:ce:fd:62:2a:
d4:74:ff:af:b7:da:b1:09:71:9a:dc:51:32:3a:bd:
87:14:c4:61:70:b9:e5:be:56:01:15:68:ee:8d:7a:
97:9d:dd:a6:00:4e:39:ac:e3:86:b7:ba:24:fd:9d:
df:31:ae:d1:c5:13:42:ec:a4:d5:22:cd:e3:9e:94:
77:b6:54:41:7d:f4:7c:b7:fa:e8:e0:c5:c9:73:5c:
8d:e8:d5:f7:8a:d7:a3:94:c1:fe:ba:f7:83:80:ac:
c6:a2:6a:a4:28:9b:fc:3e:6b:3b:66:9e:7d:2b:bf:
e4:53:24:a5:63:04:fc:55:2f:4d:3d:6d:2d:35:e0:
dd:d5:91:cd:83:b0:09:e3:92:26:63:e8:96:85:20:
04:2f:a5:02:0b:80:e0:4c:b8:f5:47:9a:a3:75:72:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:94:F6:9C:29:5D:58:89:73:F9:7F:C9:58:D7:CA:45:54:1C:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:b000::/40
Signature Algorithm: sha256WithRSAEncryption
21:4a:ab:af:8b:a4:ca:b1:59:1f:08:83:3d:3b:d6:e1:8f:25:
4b:dc:02:21:dd:0d:d3:1b:33:98:b3:df:08:62:70:e0:d2:c3:
31:94:49:97:46:b9:72:6a:96:3d:27:14:69:0a:36:65:ea:5c:
13:00:e8:38:c0:26:de:a3:5d:36:d7:af:73:51:b2:e1:b6:3f:
ea:7c:ac:4a:ba:b6:db:26:e3:c1:2f:96:87:d3:af:6a:a7:91:
f4:44:36:e6:86:ed:39:f2:0f:6b:cf:fc:f2:e4:09:d3:60:0b:
dc:55:e3:b7:b4:e3:ec:0c:ed:96:16:e5:b3:9a:e7:0c:87:d4:
ee:45:57:5a:55:a3:86:c3:92:98:55:4a:44:6b:92:74:44:92:
28:7f:be:43:c7:50:01:e3:05:6d:94:9c:32:18:58:74:51:27:
e2:cd:e8:91:f5:04:1e:66:69:14:24:29:30:0e:58:e1:d5:01:
50:59:77:1b:81:48:4f:d2:10:44:9c:ea:95:eb:eb:43:4b:21:
f0:24:d7:0e:25:53:0c:6f:4c:b8:d7:cb:21:ac:fe:3d:21:07:
9d:15:24:b6:f3:99:a5:5e:0d:65:f5:d3:9e:6a:fa:f4:0a:75:
79:ad:77:a4:96:7a:2d:2e:c2:42:a4:c4:e8:cb:bb:f1:30:0a:
74:ea:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:01 2025 by rpki-client