Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f067aa52-ee52-4fb2-867c-8dc79786d43d.roa
File: f067aa52-ee52-4fb2-867c-8dc79786d43d.roa (raw, json)
Hash identifier: mSNbBP1mQGBTVAyalh5fjNF7BriXvgbzHa9OVQQdiZU=
Subject key identifier: 0F:07:74:B1:03:1F:47:7A:D0:1A:69:F3:92:E8:DC:D3:5A:BD:B0:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74C27E4F63D2CEC0D8FF999BD7E6F5520E305096
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f067aa52-ee52-4fb2-867c-8dc79786d43d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c2:7e:4f:63:d2:ce:c0:d8:ff:99:9b:d7:e6:f5:52:0e:30:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=d071e60472849d5efe76a0aa2cd9446baa57ff1cc17de45f5b70d802a5894a36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:a6:25:12:31:06:02:54:0b:13:2b:92:bf:
82:47:7c:e1:a5:f1:9b:b0:5e:ad:21:36:19:19:4c:
6c:ee:b5:dd:88:75:44:08:25:c7:e0:7b:5a:a7:ed:
b3:f7:27:fe:42:3c:76:d0:eb:cb:3f:f8:5c:4a:0f:
5a:85:ee:85:59:30:4c:66:29:01:90:bb:2d:97:52:
aa:6c:84:2f:c4:be:a6:3b:f6:5f:98:31:17:93:99:
7f:1a:eb:fd:c9:de:1a:c5:ad:c8:1b:17:03:de:ef:
32:2d:2e:c6:3a:82:1a:aa:66:97:14:1c:9b:a2:79:
f5:10:8e:e0:f9:3d:37:1a:4c:69:e7:8f:67:29:f6:
9c:da:8d:c9:a7:96:43:5c:7c:c2:45:e2:42:52:9c:
88:dc:6f:ac:66:9d:a4:e0:50:81:97:8e:f5:00:7d:
f4:26:31:d6:18:6b:74:e5:72:8b:62:4e:e2:ab:42:
3a:f0:ea:43:a6:b1:d7:a9:dc:6e:1e:a4:28:04:db:
96:75:d4:4c:a6:68:91:a7:c8:cb:94:9b:77:fb:21:
89:3c:fb:5d:1d:c7:53:90:00:77:4a:6e:00:6d:d7:
1d:a5:3d:50:e1:90:b6:2b:1d:17:e9:54:37:08:c8:
51:88:6d:90:e8:37:dd:0b:82:ca:d5:39:8e:47:87:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:74:B1:03:1F:47:7A:D0:1A:69:F3:92:E8:DC:D3:5A:BD:B0:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f067aa52-ee52-4fb2-867c-8dc79786d43d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2080::/48
Signature Algorithm: sha256WithRSAEncryption
b2:fa:0f:7e:48:cc:16:40:ab:bd:69:d1:8c:7e:ed:33:23:dd:
91:92:3e:8e:e6:a6:ee:33:cc:36:d2:6d:85:c6:64:68:4d:99:
19:18:57:25:19:3d:64:25:d0:ee:a0:d7:34:7d:45:0b:74:67:
5c:81:ed:94:46:fd:38:d9:f2:86:4f:1c:f9:0e:cd:44:05:72:
c3:77:b9:7f:50:44:47:c6:70:70:1e:ab:c1:7a:14:de:f4:38:
09:0b:c5:1a:68:1a:73:51:72:81:ff:43:a2:5e:f9:1a:f3:68:
be:e1:d2:bc:5a:a6:d5:dd:63:2b:21:63:25:f4:2d:c3:62:2a:
78:83:68:b7:24:14:c7:57:68:6e:a5:dd:04:c0:84:8b:9a:0c:
5e:aa:64:83:89:1b:5c:d1:00:fb:27:c7:f5:aa:3b:d2:14:dc:
c6:da:07:bc:25:d1:0f:5f:42:6e:7a:2c:4c:4b:d4:6f:ad:74:
6f:25:57:39:52:b1:61:92:28:df:6a:83:d6:c6:97:c1:f4:83:
9c:a4:20:62:90:df:23:cd:7c:be:59:8a:39:ea:4c:94:42:1b:
b3:81:09:d4:0e:07:b1:62:ba:59:cf:ee:53:e5:b1:fa:86:1a:
ad:26:c6:7c:82:fc:34:ab:fb:ba:9c:d3:61:23:b9:df:fe:f8:
1a:d4:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:54:09 2025 by rpki-client