Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
File: f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa (raw, json)
Hash identifier: vDq7b0k0Z0hY6UBbiYkk7IElxxDd9YGfKcDhF+IVWUE=
Subject key identifier: 28:BB:B3:F4:8D:0A:30:9E:CF:EE:72:1F:E7:46:C0:53:CB:EA:AC:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57505D8331B42C2A1D1358E0885F964AEA4F7B61
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:50:5d:83:31:b4:2c:2a:1d:13:58:e0:88:5f:96:4a:ea:4f:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=19e78bb23d62feab74fda875d6b4352502641300537bd7e1d3799240a252bff6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:79:75:f2:94:3c:d0:ed:f5:4c:e5:30:0f:
99:07:47:47:33:64:6c:3a:30:6f:fc:5d:27:75:27:
08:e2:f9:52:ad:7f:67:d4:f5:7b:21:29:d9:9d:1e:
ff:e4:e4:ad:52:94:48:fd:0f:a5:26:f8:4f:6a:02:
1c:5f:90:c8:81:7f:d1:4e:75:b6:9f:51:d3:1e:ef:
d8:a3:a6:d1:81:a6:9d:e5:38:36:2d:2e:4d:19:f9:
f3:33:1b:8e:05:b3:d5:80:6e:42:9b:e0:f7:2a:11:
ca:b1:ea:5b:e5:51:50:76:f8:a3:e5:85:91:a3:11:
3e:dd:1d:82:fd:f7:aa:a1:8b:8c:12:f1:d3:2b:88:
6d:d5:24:9e:f6:71:fa:3c:95:ab:5e:56:b5:90:10:
f9:90:e9:18:4c:c7:bc:0d:80:e4:39:2a:1b:97:62:
d8:85:d4:18:5b:29:45:30:80:b1:ab:a7:41:25:c0:
00:f1:d4:fc:29:3e:88:d8:71:b7:6c:5c:8c:08:9b:
74:dc:b9:a8:a1:15:3e:1f:65:c0:8d:f5:23:77:52:
d8:90:6a:94:ce:63:b9:49:66:c5:67:ac:9c:58:45:
4b:a4:f1:ff:70:b6:c9:d7:94:bb:96:bf:4c:e5:73:
f5:3e:39:c1:05:0f:61:90:73:61:dc:06:ff:e3:df:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:B3:F4:8D:0A:30:9E:CF:EE:72:1F:E7:46:C0:53:CB:EA:AC:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
09:14:0b:a4:c6:2b:f4:a4:cd:0c:f6:af:82:de:d1:41:03:d2:
30:b8:a9:9a:7d:4c:d8:1d:35:a5:a9:32:74:ed:0e:9a:41:c2:
30:55:50:bb:81:92:0c:d8:62:34:9b:2a:aa:17:2d:85:2e:05:
4a:c8:30:ba:7c:7a:76:4a:98:d0:93:5f:f7:e8:d1:cd:41:cf:
7c:9a:df:f8:ae:98:77:3f:e5:6a:06:09:7f:88:9f:d5:7b:ac:
25:0b:86:c4:af:05:58:b6:bd:69:b6:81:1d:fa:a6:19:99:69:
39:d9:93:b8:20:94:3a:22:94:73:e6:88:1b:e2:01:f8:dc:46:
8f:c0:4c:ed:eb:d7:4b:ab:20:51:14:dc:eb:ad:c0:d9:48:50:
80:20:b8:8e:79:f0:4f:60:53:bb:f0:33:19:9a:08:ce:5d:56:
3d:95:89:b6:6d:32:73:d4:75:a0:7f:81:dd:0a:f4:80:96:75:
b5:c0:26:ba:e1:25:37:94:75:7c:ca:b3:a5:e9:9c:22:32:72:
f9:e2:9c:09:9a:6a:91:3d:b8:70:e8:c0:cd:2a:e3:76:a6:c2:
2f:53:7a:6f:e1:1f:ee:52:b1:76:9f:04:5e:c0:5f:03:39:27:
c0:aa:0b:93:22:43:97:99:33:ab:17:69:fd:c3:63:25:ec:b7:
44:14:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:01:05 2025 by rpki-client