Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
File: e9508335-e447-4b74-99f5-98b04a3a6b2f.roa (raw, json)
Hash identifier: /C7nRjdYLguCsGU8eF2kFIoxNSH4qSK7THN7TGmuZwc=
Subject key identifier: 99:80:DB:FB:AD:1E:A4:79:7D:15:D7:79:6D:B1:BC:D5:E1:7C:B3:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53F9D2395B9E54F4FA3B370B0FD6A19270A18819
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:40c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f9:d2:39:5b:9e:54:f4:fa:3b:37:0b:0f:d6:a1:92:70:a1:88:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=845948c9291bb8fa35391e1f320a6f38bac24b547f3e45aa6b0f40cdb9082015, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:26:3b:58:1b:97:c8:b6:ff:57:b6:7e:5e:
14:21:09:eb:9d:59:d3:04:3d:27:4f:1a:0c:f2:47:
2e:52:aa:db:3a:33:cb:af:6a:43:dc:16:e9:b0:f6:
10:fc:a7:c3:7f:50:50:5e:63:f2:1f:a7:53:5f:bc:
cb:2c:70:3a:8b:a9:85:f2:a6:85:45:98:fb:f4:f8:
50:27:e6:00:76:92:28:78:cf:42:25:c5:c3:79:88:
6d:16:a8:d1:00:88:2a:fe:ce:39:41:6d:fd:68:b0:
0f:c3:c9:e9:9c:73:cc:99:30:82:f6:15:db:ba:6a:
d3:f8:1c:d5:24:e2:9a:27:06:44:33:1c:4e:40:8f:
0c:bc:2c:7a:a5:0a:d6:b6:c7:66:dc:be:8e:9e:b8:
ea:e2:54:7f:44:18:99:95:fe:9f:b7:69:cc:5b:3d:
15:10:16:ce:87:da:a3:5e:3c:04:0a:c8:62:4e:13:
fe:71:73:5d:69:10:2c:29:5b:e2:74:d4:40:eb:24:
00:79:74:e1:d6:a2:17:55:8d:7d:c4:65:91:64:32:
05:47:36:30:a5:66:52:0b:e7:ad:79:05:79:be:6c:
92:0c:eb:0b:0b:6f:13:ad:17:94:e5:de:4a:2a:20:
a3:c0:3d:fe:c7:92:8e:40:9b:53:f5:0f:f8:8d:fb:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:DB:FB:AD:1E:A4:79:7D:15:D7:79:6D:B1:BC:D5:E1:7C:B3:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
6a:49:6f:3b:98:c5:cc:42:bd:c7:17:0d:76:a8:0a:9f:0c:f7:
55:e1:0e:17:ad:ab:4b:50:0d:78:66:07:99:cc:97:ff:6a:35:
15:37:22:36:98:b2:bc:ff:90:6c:0f:15:b2:e0:08:91:e1:3b:
0d:f9:53:34:09:d7:54:1f:63:fb:87:dd:0b:b7:7a:1e:29:ee:
4c:74:37:6d:f2:7f:f5:5f:fd:51:cd:63:6d:25:35:8c:f0:8c:
d3:9b:79:71:db:52:55:a7:94:b1:e9:68:91:00:c1:1d:4d:a9:
72:b3:a0:2f:41:ee:58:0e:2f:24:00:85:37:34:9d:68:f2:69:
ec:87:c5:56:d8:40:67:bc:f2:1b:ab:b2:bc:bb:99:f9:fc:36:
ab:52:5b:89:5b:a8:c4:63:7d:a9:0d:62:4a:35:03:ea:60:89:
e9:c8:b2:c8:48:56:85:51:87:1e:9a:ec:72:f7:dd:34:27:18:
98:e1:79:50:42:85:0d:8a:06:a0:54:4c:31:9a:95:0f:62:8e:
48:a7:6d:3a:f7:fd:05:54:10:c7:36:a3:0e:40:de:cd:31:94:
2c:ed:7e:59:e8:d0:5a:8f:56:6f:02:d2:5a:8b:93:bd:4e:1a:
c8:4f:f1:42:47:06:fd:c4:0a:f1:0e:bb:ad:a2:16:91:43:7b:
3b:85:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:13 2025 by rpki-client