Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
File: e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa (raw, json)
Hash identifier: Dx7oOkB+9jg19HkHijCQFkkUfbaLWIklc1fJfRagzh0=
Subject key identifier: 8E:3B:50:12:6C:E3:32:BE:2C:0C:D1:E5:A8:F3:D2:6C:B2:06:CB:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2AA529089A34651FC165878BCF31F804DE2EDF2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a5:29:08:9a:34:65:1f:c1:65:87:8b:cf:31:f8:04:de:2e:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4dbda6953dc6d7fc5f8badbea79b54c9a7b45308f950f4dac4bf120af2b8805c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:37:22:4f:40:14:10:77:93:06:b7:3f:2a:
ff:d2:7b:6c:a4:21:09:3e:fd:03:6c:67:84:79:b1:
1d:39:a8:96:c3:56:5d:02:ac:3a:f1:f0:b7:98:da:
3b:76:0b:37:da:b6:12:62:fc:db:d5:ed:ee:86:fd:
d2:5b:a1:2a:4a:8e:3c:18:08:4b:05:0a:87:6e:e2:
d2:fc:38:47:4e:d2:67:e6:dd:b5:ed:b9:22:0d:27:
21:7e:25:ff:4e:36:ce:e4:cc:31:0b:9a:96:85:15:
53:3c:b5:4c:a2:a6:c7:5f:45:fc:e6:bc:9c:1f:01:
37:aa:08:ac:fa:2f:3b:31:88:3c:92:ed:73:2d:6c:
9e:6f:9c:83:19:5c:79:bf:a4:96:21:c9:db:20:8f:
bc:5b:15:2d:90:54:4b:49:58:7b:07:ba:8e:39:af:
32:e5:a6:0a:d4:bf:07:68:f4:79:17:e4:ab:49:5c:
9b:24:c5:e4:22:f4:7e:51:47:ae:ba:7a:a9:e4:a2:
4d:2d:9a:91:98:bf:35:21:25:04:45:73:45:a5:40:
a0:7e:10:f7:82:05:f6:fa:1e:37:03:24:a3:84:6c:
8d:20:7b:de:bc:da:8c:93:e5:10:9c:40:11:79:40:
7f:d9:72:a4:e0:9f:4a:a1:fd:ae:f1:10:90:df:6e:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:50:12:6C:E3:32:BE:2C:0C:D1:E5:A8:F3:D2:6C:B2:06:CB:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:a000::/40
Signature Algorithm: sha256WithRSAEncryption
34:4e:60:49:46:77:44:97:a5:37:ba:87:90:87:87:7d:f5:db:
52:e5:7a:18:7d:ce:38:44:f4:df:a1:bb:3f:81:8f:d4:7a:70:
12:b6:1d:0b:03:7b:a0:9a:91:06:ac:e4:39:dd:79:22:18:83:
4d:f1:68:09:92:c2:7e:74:ce:2b:3b:0d:1b:27:e9:94:16:85:
16:89:9c:fb:42:7c:00:87:07:71:2d:85:63:c6:f6:62:4f:5a:
be:94:e6:df:7f:34:76:2b:16:55:ac:31:e8:3f:c4:06:35:90:
1c:f6:d1:43:b6:33:ac:af:07:af:9c:77:47:a3:54:5e:69:62:
d3:66:5e:30:a3:c7:0f:2d:a1:d7:97:cb:a0:19:db:19:44:ff:
85:2a:df:a1:22:04:5a:13:d5:5f:75:c3:fb:af:3a:51:ea:19:
a9:b5:66:61:9b:03:d4:3e:0a:6a:e0:22:08:09:49:41:68:22:
ea:7f:f3:9f:aa:52:0f:3e:e6:d4:58:b5:f8:3c:d2:4c:9a:f6:
fa:5b:99:e3:40:0a:59:fd:e3:21:25:95:71:88:65:9d:e6:dc:
8f:5f:60:0c:81:5d:b0:11:7d:54:01:38:af:41:3f:e9:5e:88:
fe:ad:64:ce:24:08:d1:ca:0e:4a:b7:2f:a6:c6:d5:b1:79:c7:
6c:55:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:53 2025 by rpki-client