Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
File: dec4a7df-5727-45ab-92fb-7078e26fd54d.roa (raw, json)
Hash identifier: gsaAIyxhGN0UoYAbZ7FbQHdsId3zx4YOWNLLUC+9DD8=
Subject key identifier: C7:EF:9B:E9:26:4D:9D:88:9C:3C:EC:F2:06:21:C2:7A:5D:92:08:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D1CF5F8DA04C6C1E03954BF89DBF41E388544EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1c:f5:f8:da:04:c6:c1:e0:39:54:bf:89:db:f4:1e:38:85:44:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=17569f2f6fafb4a077caaf4da5d130b9caa338581288a4e8dde9a358d2e73106, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:72:10:bd:ad:6c:63:84:56:82:42:4e:26:
9a:ef:a4:f2:97:88:ec:21:f7:19:97:a7:12:9f:f9:
8a:e6:cc:d5:9e:6c:5a:bc:b9:eb:90:5c:ef:f1:16:
03:85:c9:de:43:ed:54:e3:7d:40:69:90:6e:8d:ec:
8a:9c:56:72:da:ae:0a:2e:e7:4f:19:7f:17:3f:55:
86:97:03:bc:2f:05:e7:bf:dd:4c:d8:e5:58:1e:05:
1b:1d:fd:2a:79:18:9c:72:19:fb:ed:db:de:95:f3:
8c:2a:1b:89:76:5d:c7:9b:b3:b4:39:02:f3:43:c5:
b6:ff:6a:65:d0:8e:51:af:e6:78:58:1d:89:67:47:
1f:12:24:59:9c:0a:05:b8:f5:58:08:f0:22:b9:06:
12:92:34:5d:be:33:8d:cb:8e:b0:3f:17:e1:14:80:
0b:2d:c6:f8:d6:bd:21:da:9f:95:7b:8f:aa:ca:6e:
95:45:5a:b8:71:f0:82:f2:ce:ff:30:7a:5b:62:65:
37:c2:a3:7e:ff:36:66:1a:7d:7d:ff:d1:85:7a:aa:
4d:b7:db:bc:76:54:9d:32:96:55:3e:54:0f:2f:cb:
2b:19:f1:64:fe:77:67:2e:8f:f4:a2:f2:30:fc:f1:
cb:96:88:fa:87:a8:71:a3:d8:fc:3d:d9:51:a4:8f:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:9B:E9:26:4D:9D:88:9C:3C:EC:F2:06:21:C2:7A:5D:92:08:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076::/32
Signature Algorithm: sha256WithRSAEncryption
7d:df:15:0e:b2:a2:85:96:cc:fc:9c:f3:6c:c0:68:4a:19:94:
96:c5:42:64:bd:ae:f1:cf:ef:93:58:3b:7e:06:69:3f:ca:ae:
16:43:8c:6d:07:14:2f:99:6c:8c:51:17:f9:71:3f:b9:2d:ec:
b7:11:c4:f8:98:ab:ee:74:68:8f:a8:47:8f:e2:3b:d3:e7:34:
25:fe:c6:e1:8a:51:2b:c5:ec:b8:d3:b7:75:fa:d1:54:3f:a3:
02:05:72:70:4c:28:94:62:b8:09:89:77:c6:24:df:54:b9:4d:
1e:0c:53:15:33:b8:86:d8:4c:e3:fb:59:82:a0:a0:25:3c:20:
2c:43:7c:8a:32:22:3b:4c:c0:f7:bb:a1:a3:2a:63:68:16:2a:
f2:45:5c:c0:03:92:c2:57:de:6d:9f:09:df:04:a4:c4:98:56:
0b:62:30:5b:fd:5c:aa:20:4a:08:9b:f6:ad:36:e9:d4:5e:45:
88:c5:45:65:12:68:3a:ca:3e:2b:d4:f9:e6:15:9a:8a:75:77:
fa:35:d2:58:1b:a8:be:31:93:3f:4b:44:cf:89:57:82:4a:b7:
07:45:59:21:c9:d4:88:b3:4e:72:d0:a4:89:8f:7c:bc:07:02:
c4:11:94:d1:1a:b5:bf:08:c6:75:29:34:19:e1:25:78:b9:06:
77:ed:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:57 2025 by rpki-client