Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
File: c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa (raw, json)
Hash identifier: Z0gwVNZSYou84ihrGZMHQV8Np8wVM98dgOR5V6ZQ+ME=
Subject key identifier: 9D:73:EB:B5:56:7C:88:ED:47:2B:81:29:07:56:B6:8D:05:0D:45:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 797B0230EF16B0740DD619BB958DFA9D2891F756
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7b:02:30:ef:16:b0:74:0d:d6:19:bb:95:8d:fa:9d:28:91:f7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=75ba192c8f948abf72b9ec7efb992d06e20889e0c4043b53bd5e548d9f19faa1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:e8:35:aa:aa:7c:ad:5f:6c:db:d0:96:f7:
9c:73:3d:0d:f8:3c:06:71:38:82:79:55:ed:0e:5f:
48:97:71:e6:d0:25:8d:fb:ab:17:2a:1a:c4:66:67:
45:0b:7b:85:10:d4:8f:68:ca:cc:59:22:5f:8b:b7:
68:6a:6d:e6:be:cf:a6:8b:c7:12:67:1e:d4:de:b2:
68:eb:9c:f1:ad:d5:3c:d4:74:a2:6b:73:b6:a4:57:
68:90:cd:65:33:99:26:9e:f5:79:1d:95:9c:02:ad:
e9:8b:eb:d8:d8:47:09:79:30:0e:a6:47:26:b0:c3:
fe:9f:8f:e0:53:3c:d4:b6:38:30:4f:4e:33:3f:9e:
63:af:73:d7:07:25:5f:0e:46:1b:25:fc:a8:90:b7:
d6:5d:c2:0c:c0:ad:da:30:6e:b6:c0:70:54:77:42:
06:65:df:21:9e:1f:cf:96:e7:24:aa:3a:ae:39:00:
de:76:f2:ad:25:01:b5:d0:f8:17:7c:30:94:d6:14:
a7:16:f4:a1:62:1f:8d:c8:40:06:e3:f7:5e:5a:5d:
cd:d5:24:60:f3:a3:1a:71:9d:65:fc:de:17:bd:9c:
47:7e:9e:1e:3b:fc:7d:88:16:17:9e:4d:2d:76:02:
3d:e8:d2:eb:60:fd:d9:3a:85:de:9f:86:7d:3f:89:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:73:EB:B5:56:7C:88:ED:47:2B:81:29:07:56:B6:8D:05:0D:45:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:8b:36:eb:1a:2d:a7:7c:35:03:12:1c:00:8f:6c:24:15:d4:
63:65:ca:81:36:34:32:90:53:b9:12:93:c9:75:11:c7:a5:4b:
a3:bd:41:be:04:59:30:b8:63:8c:30:3b:8c:7c:d1:03:23:ff:
19:45:9b:82:66:af:c3:4a:01:18:02:b6:09:d6:4a:15:19:21:
d7:d3:16:c5:a5:5e:78:0b:00:1a:56:a6:d8:55:e9:a0:f5:50:
9f:1b:50:7d:59:ba:af:1f:97:df:f6:a7:db:cf:42:23:a3:8e:
5e:78:40:f2:a6:2a:0d:c3:44:ed:8e:1f:c6:8f:cc:de:2c:56:
cc:d9:6e:4d:a1:1a:22:3f:db:f4:27:98:fe:ca:33:a9:dc:30:
61:bd:b0:d6:80:30:c5:af:d7:87:fa:f6:96:16:a6:72:c9:f1:
f3:32:49:9b:91:c8:96:58:ca:7b:b4:cc:31:8e:a9:12:91:9b:
93:ae:a7:27:67:45:d7:0a:ea:c6:2f:4f:f3:b5:64:d5:ab:a4:
85:7a:ff:6d:70:fe:b5:b0:4a:f9:13:a1:7d:f8:00:fe:a2:4b:
6b:fa:88:8b:68:07:df:a8:f9:af:7f:57:25:04:db:fb:f9:1c:
2a:ba:14:f4:9e:2e:e7:cd:0a:ae:b5:fc:79:64:0c:0c:3a:fa:
0b:76:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:38 2025 by rpki-client