Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: 4b+JIIvEKrVuYq2kkHwjza7TxRIWrpCF/XBgLvu3pNI=
Subject key identifier: 3A:85:09:A1:6A:B4:B3:E8:7C:6F:B3:8B:E3:2A:AB:0C:A1:39:C6:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4FFE925554AE653B98340A9BEDD8C00466B4A1DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:92:55:54:ae:65:3b:98:34:0a:9b:ed:d8:c0:04:66:b4:a1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ae52274f654b71ab7014c8ebc0ec448308e9a2b9823beb23d2229897852583a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:9a:57:1a:dc:7f:bd:87:66:8f:1d:34:75:
56:62:34:c6:2c:4f:45:37:32:c2:84:2d:eb:07:60:
85:80:12:71:7f:c3:93:59:23:68:3c:57:5a:8b:44:
f4:e3:73:ad:55:22:31:20:76:1a:86:73:cd:94:5f:
2d:63:8b:c4:db:fc:37:86:0d:69:e6:37:2e:8d:bb:
ea:0e:bc:d3:e4:40:63:65:3a:d5:ea:87:12:6e:91:
0b:bf:f5:93:a0:24:c9:45:e3:15:67:35:ec:de:5c:
b4:fa:2d:de:2a:d1:68:ec:fd:5a:61:8f:ba:3a:df:
ce:fe:e2:6d:a2:2b:63:eb:5c:70:7d:b6:bf:1a:af:
23:d9:49:3c:c5:67:e2:71:15:db:40:fd:cf:7a:4b:
4b:20:bb:0c:86:e7:43:57:7d:91:c2:72:32:2a:9e:
6d:7d:82:96:40:a4:ac:a4:bc:b3:a4:56:43:d6:96:
59:dd:d4:78:1d:71:92:26:39:1e:9b:d1:7c:cb:de:
de:ed:f1:ba:d4:ca:4c:2b:2f:27:b8:29:aa:15:96:
a5:bf:af:15:eb:ac:28:bd:19:b3:e0:a3:4d:3d:39:
de:70:fd:a8:d3:ac:93:02:2d:3a:44:8f:67:0e:68:
7e:32:85:3a:e7:ba:cd:62:10:dd:cc:71:5f:b1:7d:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:09:A1:6A:B4:B3:E8:7C:6F:B3:8B:E3:2A:AB:0C:A1:39:C6:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
31:d5:7c:93:d7:69:45:5c:c3:9b:c4:69:6b:ce:c6:de:e2:5a:
70:d7:b4:05:29:f6:1c:45:59:cb:e1:4f:5d:a1:e5:1d:8a:1f:
b6:6b:4e:0b:bb:62:c6:15:45:15:b4:30:26:9a:e8:45:fb:a9:
7d:73:c9:37:ea:43:be:91:e3:fe:fd:3b:f1:64:ce:3f:ce:c5:
d1:ee:94:ed:b9:24:3d:71:93:5b:94:23:58:a2:19:a5:45:3c:
24:64:04:66:fa:32:1b:d5:b9:b9:55:57:3f:b8:ad:e7:7d:ac:
c1:33:15:d9:4b:02:9b:33:e4:6b:a0:07:9d:9e:a3:4a:6e:63:
5f:3e:97:f8:52:b5:ec:7d:c2:5e:1d:ec:65:96:3b:63:b2:56:
7f:01:cd:fd:d1:2c:f7:60:31:b9:25:ad:4a:bf:94:3b:e5:b1:
0c:c2:7e:bc:d7:ae:ed:15:a0:cf:ae:64:d3:dc:9b:4a:95:50:
c4:93:cb:5e:94:77:49:45:0f:f6:72:15:b8:db:a7:e1:10:ce:
97:c2:79:81:22:9a:03:9d:79:d5:ad:a9:de:89:86:13:3a:4d:
5e:3a:61:40:00:d7:6e:e4:42:36:df:71:0c:86:ea:94:ae:7e:
f0:75:b3:9f:52:2f:d0:2d:ca:9d:0b:a2:48:1f:ab:a8:c8:9d:
e6:eb:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:48 2025 by rpki-client