Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
File: c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa (raw, json)
Hash identifier: 6f7qtcQMjqiq0FrGMpu5ReSQQHC5Hh4z2tQUNQNeesE=
Subject key identifier: 61:72:32:C5:06:55:93:37:66:C3:46:BD:AE:11:F0:AB:55:B9:CD:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6766EE6A76F349DC1D9EA5629890B524162E599F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:66:ee:6a:76:f3:49:dc:1d:9e:a5:62:98:90:b5:24:16:2e:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=bee72f44c77ab91a19c1b3b3e3831b2b1554b60766908ff7ff0657641430df24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:7f:91:05:73:b6:44:18:9b:ae:da:cd:a1:
35:4e:68:f0:a8:0f:90:b8:a4:2a:ec:38:a2:0c:00:
46:c2:30:37:42:58:ef:f9:d5:e8:1f:1b:58:90:ef:
e1:03:34:a3:17:b7:bc:b8:2b:f7:1e:cc:e8:89:4f:
fb:6c:04:c5:12:73:ac:a4:34:fb:38:bb:16:76:22:
26:e6:50:31:1d:7b:e8:2e:26:66:ae:f2:38:86:2a:
b8:68:e3:d4:e0:d2:bd:a9:e2:78:ea:ca:ec:88:c1:
b8:a9:80:c0:21:b5:a3:14:6e:6a:46:56:09:78:52:
20:e7:45:ee:bf:14:a3:72:6b:7d:a0:b2:88:c7:dd:
c6:37:43:90:28:aa:57:44:e2:d5:da:64:00:73:97:
76:0a:ff:1d:77:d1:ff:ab:ed:92:be:c2:49:45:27:
9d:d2:4a:d2:99:c0:5c:88:ee:d8:84:22:f3:a6:b6:
4d:31:42:dc:50:77:0e:e9:0a:e2:c8:a0:49:a0:f4:
81:f2:34:9e:cb:2e:86:6b:ec:eb:16:14:8e:22:f4:
69:1a:da:3f:9b:9c:66:f3:ea:c1:2f:c7:94:a6:98:
33:6b:10:6c:ad:d6:9b:a1:bd:bb:82:ec:a6:3b:4b:
72:0e:7c:eb:2b:79:0a:5e:ca:97:7a:79:8d:f3:96:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:32:C5:06:55:93:37:66:C3:46:BD:AE:11:F0:AB:55:B9:CD:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:a000::/40
Signature Algorithm: sha256WithRSAEncryption
10:ee:2e:0a:4b:1d:1a:56:4a:ee:a2:46:2c:8e:92:e1:32:30:
99:64:1e:d3:0f:c3:d0:92:e6:05:cc:be:cc:f7:25:a8:24:12:
ec:92:15:dd:2a:60:73:a2:38:b4:c5:cc:06:4d:c6:2d:03:26:
6e:71:0d:8c:28:11:87:1f:23:26:3e:05:59:cb:f5:b6:b5:3d:
f1:d2:ad:8a:c9:e5:a8:be:3f:41:25:39:b3:fd:b3:5a:ab:e7:
a3:19:34:80:3c:ea:ae:46:2d:9b:c8:21:b1:96:c8:08:76:bc:
92:33:88:b5:39:22:30:60:0a:ca:7d:ac:de:23:06:14:e2:ce:
09:4a:94:b5:55:09:b0:52:8b:bd:24:9d:05:26:41:fa:89:70:
a8:78:74:1b:95:4b:e1:09:76:ee:b6:79:5c:da:9d:b9:39:52:
ef:a9:9e:f8:ae:af:49:a7:89:ad:21:be:15:8d:4d:18:cc:b0:
26:3f:6e:65:2a:9d:99:7c:85:3b:7a:e8:e4:b1:72:1d:02:0b:
a7:8b:2f:aa:72:88:25:71:13:ab:92:ae:c6:16:61:fd:c8:2b:
23:cb:69:78:c1:39:d6:98:a0:5f:ee:9d:6b:9f:a1:a3:00:f4:
97:2a:1e:07:33:69:c7:a0:6c:37:2b:b1:4f:31:57:bf:99:53:
26:8e:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:09 2025 by rpki-client