Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f53e7156-ca49-453e-98bc-54364e6eb008.roa
File: f53e7156-ca49-453e-98bc-54364e6eb008.roa (raw, json)
Hash identifier: mQjDVJqE5kvP3EYH/oMZcmAQhC3ktRcfxTgv5e+4AoA=
Subject key identifier: 34:4D:48:B6:69:9B:FC:1A:F6:59:0B:05:07:73:3E:F1:A6:2C:06:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2BE434CF533EAA3381F69EE406136AF52565A546
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f53e7156-ca49-453e-98bc-54364e6eb008.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e4:34:cf:53:3e:aa:33:81:f6:9e:e4:06:13:6a:f5:25:65:a5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=160e61d36518f7520ef63256053f112028c0d10a0b37683f6c7aa6ebc5a73011, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:01:c2:3e:01:6f:86:7a:c9:7c:ec:af:2e:
04:45:04:d2:d4:35:b8:36:41:db:6c:13:2b:14:31:
79:8d:fe:eb:6a:fd:52:10:ae:6c:3b:8f:a7:2e:7b:
7f:85:4a:ed:01:53:da:1e:2d:20:e8:eb:55:c3:24:
fc:62:c6:a5:a2:cc:00:cf:52:54:98:f2:c4:e0:52:
83:74:10:ed:9a:57:ef:a8:40:9d:c1:af:4f:bc:52:
05:b1:5e:7c:5d:9b:99:c6:60:17:c0:19:fb:d9:0f:
90:94:83:0a:4a:26:98:e0:71:88:20:a3:16:08:cf:
de:86:1e:ff:4b:b2:01:e7:17:d5:be:64:be:ca:23:
1a:5e:10:dc:32:f4:d4:b8:dc:c0:28:5d:fd:4b:d2:
aa:63:62:7d:36:7f:b3:e8:dd:bb:b6:5d:c9:59:20:
10:2a:f7:c3:2e:69:61:06:e3:ae:3a:93:06:0c:35:
f2:1d:95:a8:52:86:59:4e:07:1c:8c:51:1e:f3:c5:
bb:14:fc:8b:3e:8a:9a:b8:b8:3a:a9:ab:48:5e:95:
40:d3:bc:e4:26:2d:ba:be:c8:ad:73:3e:db:0b:7f:
ea:41:78:d6:7c:2c:88:ec:9a:59:f5:07:2f:3c:3f:
62:56:60:06:d7:d9:40:29:01:4a:6b:a7:4d:10:50:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4D:48:B6:69:9B:FC:1A:F6:59:0B:05:07:73:3E:F1:A6:2C:06:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f53e7156-ca49-453e-98bc-54364e6eb008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8040::/46
Signature Algorithm: sha256WithRSAEncryption
8b:6a:02:d0:41:78:28:44:4a:32:87:50:16:a6:96:84:5b:33:
0a:33:0a:44:ba:d0:25:10:b1:15:60:af:08:b4:d2:01:b7:29:
13:08:0b:3c:24:a4:bf:1c:e3:1c:4f:8c:3d:f7:50:c1:5d:e1:
34:ce:e7:78:72:27:05:60:7f:81:e1:5d:9f:b8:91:c9:4d:e4:
73:65:75:ae:1d:fa:f3:ed:ab:1b:e8:48:bd:e9:89:9f:bb:b5:
3f:f7:fb:b6:35:4c:93:cc:04:96:ba:55:5b:85:95:1e:8b:13:
1f:45:be:d6:ed:69:32:d7:de:3f:dc:6d:03:82:33:e4:ad:d6:
af:6e:21:17:fd:f4:91:14:af:a1:98:90:34:16:4d:0f:79:44:
0f:21:39:fa:9b:28:76:b1:29:aa:57:d7:fe:ac:3f:e7:98:d9:
a1:d4:05:fb:62:12:e8:3d:7e:a3:ef:f1:26:ad:16:40:a9:72:
94:44:f5:24:f7:0e:b7:4f:f7:c6:39:63:14:f1:95:56:ad:66:
95:3e:bd:21:4c:ad:e1:60:12:b6:5c:95:cd:a7:5b:e2:aa:dc:
1b:44:6c:e6:27:5e:42:19:43:52:06:3e:7e:5b:41:be:ac:38:
80:41:bc:59:ad:b9:7c:97:86:83:57:f6:01:e5:33:3d:59:34:
08:ee:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:20 2025 by rpki-client