Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd129ecb-5978-40fd-ada8-5ab27adcb622.roa
File: cd129ecb-5978-40fd-ada8-5ab27adcb622.roa (raw, json)
Hash identifier: uBeyNqpoXbK+n1/cxs0sspNFu2osGE7MfD0mkwrwFsw=
Subject key identifier: 06:BE:4C:7A:F7:62:3B:7C:0E:50:E5:68:8B:95:E2:3A:9C:2C:46:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38A56E28D8ECD26496FBC6797DA17F4A1C44E830
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd129ecb-5978-40fd-ada8-5ab27adcb622.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a5:6e:28:d8:ec:d2:64:96:fb:c6:79:7d:a1:7f:4a:1c:44:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7dbf0e869d189ac4dcef1648cc51a0ac568ec9835162d38acd1687deb6453a46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:02:81:4a:3c:79:b1:20:eb:ae:ef:ed:a6:
67:9b:7a:bb:ae:3e:71:75:5f:02:1c:3b:32:15:b1:
4e:81:9f:10:c0:e9:c1:65:a3:fe:1f:0a:68:f4:b5:
d0:58:e8:e8:f0:cd:f0:fb:88:90:0d:31:88:f2:e6:
6d:4e:68:d3:98:0c:f0:dd:e1:87:47:23:ab:46:7f:
ec:ae:37:9b:81:db:39:25:da:b5:bf:40:ea:3e:1f:
ba:3b:6e:d6:e3:2c:f3:41:c6:af:e8:47:9e:ed:5a:
ee:f8:66:a6:49:15:62:8c:16:de:f8:7f:12:eb:75:
45:56:61:ef:77:75:e9:12:68:df:8c:5c:76:c6:91:
0c:79:fd:bf:85:a2:9a:f6:e2:df:2e:96:4b:7f:8f:
aa:d4:4d:24:0b:de:04:4f:66:a4:4f:8b:f3:c4:37:
d7:b7:19:b2:7e:76:31:77:91:2b:b5:1d:8c:78:8a:
8a:95:7d:d2:48:54:7b:78:cf:4b:60:68:e2:8e:18:
a5:9f:90:3c:e5:f5:db:04:4e:a4:cd:3b:d1:f1:60:
85:1a:23:da:49:08:8a:30:c8:a2:cf:77:8b:53:9f:
64:3d:0f:9f:9e:e3:14:63:e4:40:0b:b4:7d:d2:7a:
c0:a6:a6:48:05:3d:13:6f:c0:28:6e:10:85:09:24:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:4C:7A:F7:62:3B:7C:0E:50:E5:68:8B:95:E2:3A:9C:2C:46:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd129ecb-5978-40fd-ada8-5ab27adcb622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
50:53:7d:39:fa:e0:08:7f:2b:6b:ae:17:83:73:10:9a:37:75:
d1:e3:39:92:16:e0:a7:e4:49:a3:7e:88:a5:39:99:34:95:84:
29:d6:b0:fd:59:c1:de:20:f3:4e:01:a0:50:60:45:9d:d8:4a:
1d:d5:3d:65:7c:56:2c:bc:54:8c:76:59:2d:f5:57:8c:13:b2:
13:57:d4:72:76:90:a0:d2:38:16:51:b1:c4:59:7b:5f:0d:49:
27:5f:51:13:5e:39:24:d3:13:b1:f2:37:64:10:c5:06:67:10:
6b:0d:51:75:ed:7c:6d:0c:91:a1:14:10:7e:4f:7e:91:b3:91:
47:6f:21:02:34:d4:75:c7:a3:ad:27:12:77:12:fe:8b:c8:fe:
6d:f9:14:96:61:af:33:3f:90:cf:54:cc:5b:b4:07:d6:d1:4e:
f8:e0:72:cb:4d:dd:f7:86:ba:b8:37:7a:65:b0:13:fb:b1:6d:
50:e9:b6:52:72:e0:ea:78:22:f1:0c:27:65:ce:0b:2a:c0:51:
36:9b:63:de:98:e8:78:41:8b:4b:55:b4:0d:06:20:62:02:e3:
76:46:1f:b0:8a:4c:b7:f7:ec:bb:a4:85:32:27:3d:ee:e1:a6:
1b:18:b4:66:de:3b:51:11:24:b0:68:d0:aa:c5:8d:c8:ca:71:
81:70:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:02 2025 by rpki-client