Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
File: dd7649a8-cae4-4d67-90f1-f01144285a2f.roa (raw, json)
Hash identifier: tKWUEuO63iFBYuLrOyaMY5jaiFKdnWMp67XrtZ/iZRI=
Subject key identifier: 13:E9:16:AE:90:7E:A2:E1:69:AE:36:0C:F6:12:89:2A:FB:14:83:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65303DEE07564A7589A22B7655401752270A5145
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:30:3d:ee:07:56:4a:75:89:a2:2b:76:55:40:17:52:27:0a:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5b465e88a0386f342a378dcb3304307d834ac6f9c834ac5d490effecf8df196c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:97:86:2b:fc:dd:f0:62:3b:1f:a2:d3:e1:
78:35:bc:21:e5:a1:c5:43:ce:55:5a:9e:07:29:85:
f5:39:72:79:3c:e2:16:05:50:f4:a0:c7:c6:8b:43:
82:8a:5a:c3:b6:6e:ca:62:97:5a:b9:e8:32:40:6f:
1f:8e:44:45:3e:82:d2:dd:ca:d9:49:da:a7:09:71:
9e:6f:f6:09:d6:b4:d0:71:d4:21:88:38:a2:91:0d:
9f:46:19:00:b8:2d:2a:c5:03:3d:4e:64:12:97:4c:
72:6f:ae:69:ac:21:fc:2d:c4:55:9f:56:ad:49:65:
da:ee:1b:09:1e:a1:b7:7b:e1:13:17:3e:6c:70:93:
8b:9c:fc:02:3c:f4:2e:6e:2a:c6:c0:06:97:4b:84:
02:02:54:7a:ec:7e:eb:8f:50:cb:46:71:9c:c3:95:
3a:5c:d0:4d:83:ee:b1:e8:c0:f4:99:2c:b6:01:ae:
6b:64:2c:de:fa:51:9c:8f:24:b1:7d:42:f9:92:0a:
85:25:23:3c:14:fc:14:7c:51:d1:ec:a6:7c:66:70:
d0:45:95:5b:46:c5:1d:0e:06:e6:d6:b9:0a:b1:81:
4e:14:d6:ba:20:8c:29:2f:08:35:9b:92:79:71:72:
a8:6f:74:9b:9a:95:a0:90:d0:aa:e2:14:02:22:fa:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:16:AE:90:7E:A2:E1:69:AE:36:0C:F6:12:89:2A:FB:14:83:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4040::/48
Signature Algorithm: sha256WithRSAEncryption
1a:5e:c9:0e:99:6a:3b:8e:a2:ba:0f:de:a3:9e:6c:e2:97:88:
62:ce:82:48:55:70:f3:39:aa:a7:a6:7d:48:12:a0:68:5f:92:
8f:00:ca:cd:fa:c0:92:bc:0e:bd:82:8f:63:b0:c6:0e:25:5d:
7d:95:09:fd:53:da:cf:3b:11:1e:3e:41:49:16:45:c3:5f:cc:
4e:c0:b6:96:ef:b2:47:59:85:b0:a1:3c:98:f9:64:a0:d9:fc:
cc:3d:c8:81:b3:91:94:42:de:52:a0:16:0a:6e:37:04:1b:8e:
93:33:7d:d5:5a:ba:a9:11:7e:c3:f6:44:f5:9d:df:86:df:0a:
92:ec:db:3e:81:b5:e2:49:f6:e4:a8:9a:5d:6b:6d:c1:97:ec:
d7:01:40:5a:21:3c:22:cc:c0:7a:7c:e6:91:b5:42:37:23:5d:
dd:c4:31:22:80:94:82:66:59:e4:90:75:cc:1f:bc:66:61:89:
19:5b:a0:da:84:89:0e:f9:e0:81:26:34:74:b1:11:30:26:7c:
30:23:08:88:7d:36:10:9c:59:87:ba:34:6c:36:3d:a0:eb:36:
d6:3b:4a:90:b5:f7:5d:05:e7:65:f7:f7:fc:83:e3:c8:32:c5:
1c:59:45:76:65:ff:84:aa:bd:a7:ea:44:88:dc:2e:17:98:5d:
5d:09:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:41 2025 by rpki-client