Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb1b933f-488b-4999-8d01-1b5c2d8459f9.roa
File: eb1b933f-488b-4999-8d01-1b5c2d8459f9.roa (raw, json)
Hash identifier: TKM/60iSMhijsLPrlaXaOx/U8CO8YUtOzBWip7SXljM=
Subject key identifier: 84:3B:45:48:EA:C4:33:1E:EB:80:7E:C1:98:2C:07:E8:BB:27:55:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C2D8AFBA25A994D4FAC8CF7922E1C931697D2E2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb1b933f-488b-4999-8d01-1b5c2d8459f9.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2d:8a:fb:a2:5a:99:4d:4f:ac:8c:f7:92:2e:1c:93:16:97:d2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=9815615ebe11e8f9ef774cd1ee36e410c68131d3886f9eebf0497d7ffbf6f2f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:d0:20:f2:b4:e7:d4:6a:d7:df:2d:67:c3:
91:65:1d:3c:ab:c2:b1:9b:6a:b4:63:32:ec:3c:22:
68:3b:c8:b6:fb:60:98:9d:b3:2a:0f:ff:d9:df:a5:
f8:23:8f:89:0b:2c:1d:09:81:99:8b:e6:53:84:63:
18:e5:83:8b:bd:c0:ea:79:bb:85:eb:b6:3c:a6:a6:
c2:12:52:88:e6:04:69:ee:2a:4d:a1:5d:22:a7:92:
36:fc:77:38:a5:c5:f1:b4:2a:af:f3:b7:17:63:67:
13:ef:eb:b8:87:6d:39:50:e7:e8:53:d9:bb:05:88:
91:03:78:85:f2:90:73:d7:38:e5:06:1a:f2:a4:04:
7c:db:90:97:98:9c:b2:1c:37:8b:2a:84:6f:84:e3:
d2:3e:68:84:1d:96:6c:56:62:a0:b7:ab:1c:de:ad:
3f:13:fd:eb:ab:f9:46:b7:fe:d4:dc:8d:f0:1d:70:
01:15:2a:4e:de:d1:e0:23:1e:e8:9c:06:fe:f6:f4:
99:a2:14:05:c9:c3:96:50:32:e9:44:a7:75:a6:8a:
ed:e5:7a:20:48:01:30:ab:ee:2c:c4:c1:68:11:4d:
07:5f:13:1e:d6:55:69:da:30:8d:6a:2a:1e:7b:85:
b6:6d:f2:78:d1:d2:c6:bb:ff:3a:74:c2:60:79:f2:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:45:48:EA:C4:33:1E:EB:80:7E:C1:98:2C:07:E8:BB:27:55:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb1b933f-488b-4999-8d01-1b5c2d8459f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:9000::/40
Signature Algorithm: sha256WithRSAEncryption
13:4a:48:ec:38:ab:97:c8:19:42:53:65:c1:e2:17:2c:74:fd:
ab:6b:87:d2:e2:da:b1:c0:4d:45:2c:21:fa:6e:5b:ca:b1:cd:
b6:9e:1a:c5:a8:28:84:68:fb:08:e6:4f:08:cf:bb:e4:f9:77:
25:7c:29:c6:9c:c1:25:5b:b7:ec:6f:3e:1f:e9:f6:e0:34:99:
57:22:67:40:37:77:4b:dc:22:77:a7:8c:2a:f7:0b:73:28:bc:
de:e2:a8:a5:4c:75:d1:99:bf:60:ba:c5:b5:c1:cd:bb:01:9b:
45:a2:51:80:cc:06:79:6c:0f:53:4d:f1:62:48:15:c4:ad:f7:
37:79:db:ff:57:b1:69:72:46:5c:b7:33:37:1a:5d:cd:fc:06:
5e:fc:17:d2:17:f5:f6:7a:0c:e1:85:ac:bd:38:50:c5:24:a6:
71:6b:c8:c1:5f:77:70:0d:75:82:fa:27:ae:16:8f:e3:62:48:
51:27:c5:1f:93:49:54:f5:0d:62:32:90:d6:5e:bc:98:50:6d:
33:b9:bd:c8:a3:37:21:19:0e:0c:ef:80:93:da:72:37:6c:1b:
02:46:1b:68:e9:7e:a9:71:6c:f8:7c:c1:dc:61:65:cb:56:16:
06:93:9e:f2:39:a9:d5:f4:49:13:86:15:12:27:22:10:a0:ad:
d2:17:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:13 2025 by rpki-client