Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
File: f6813853-40b9-46d5-be14-0208aaccf095.roa (raw, json)
Hash identifier: 7nfPecyg6ZfGWVFAES8yqw/UA9rlhDGIedZnAh4el+s=
Subject key identifier: CE:9B:31:23:7F:E7:E2:9C:BE:CB:3B:CC:B2:91:1C:8D:37:BF:0B:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76E25F7B7D843CE8F6479A4BE46C1FBF777536DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e2:5f:7b:7d:84:3c:e8:f6:47:9a:4b:e4:6c:1f:bf:77:75:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1dc8030de388d1e14dd18b8a12abb5b81c06bcb7d1f8fe54824d0cc692b9cc5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:32:e8:85:08:e8:5a:d4:a0:7c:6f:69:41:
0e:40:d6:f0:fe:2f:83:87:f0:56:34:e3:46:4d:79:
36:e2:1b:1a:af:ce:8a:c0:1d:1e:e3:7c:f5:9e:69:
45:de:1e:94:7b:86:5c:33:e1:93:4d:45:61:fc:61:
05:9f:5d:85:05:85:f2:cb:93:18:70:e5:b2:b7:7f:
04:9a:8e:17:0c:6d:d9:92:c2:42:0d:2a:88:5c:23:
d9:91:7d:2f:0b:b4:00:3e:2d:36:73:e7:f3:3f:d5:
f0:55:56:ee:34:ac:90:0c:76:37:2f:b1:cd:08:d3:
af:e3:a1:7a:21:7c:70:9d:f9:20:58:07:5b:05:65:
c8:db:51:5a:4a:a3:01:17:ee:d4:d7:9c:ec:eb:17:
1f:8b:c3:02:56:cb:fb:2c:72:e0:0f:f4:e4:8f:06:
93:45:25:33:b4:64:c4:ca:ed:65:6b:c1:6d:c1:e1:
55:1c:2b:28:78:70:0b:41:01:34:4a:88:10:14:f4:
81:3a:06:2d:79:05:1f:a0:bb:51:0a:d4:eb:59:70:
33:bc:36:cf:49:e0:6d:d8:bb:c9:71:6c:8f:4f:40:
41:b1:21:1f:80:92:9a:45:85:2c:c6:cc:51:26:4a:
ba:95:91:c6:5b:16:71:d2:da:52:06:28:91:7f:f0:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:31:23:7F:E7:E2:9C:BE:CB:3B:CC:B2:91:1C:8D:37:BF:0B:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4080::/46
Signature Algorithm: sha256WithRSAEncryption
3a:9e:82:57:1e:f9:20:e0:b2:7a:75:41:d0:96:a5:7d:38:72:
fd:7d:08:01:ce:ec:37:6e:7e:12:31:cd:3a:f5:1a:0c:a4:5f:
f8:3e:87:6e:03:2c:5e:52:66:70:db:91:c2:48:f5:b5:ff:a8:
0c:ad:eb:fb:91:3f:b0:15:ae:e3:f3:b3:c5:ce:42:39:49:59:
97:e0:8e:fb:b3:f1:fa:6e:36:2a:65:a7:93:77:26:d1:f1:6c:
20:da:63:2a:56:5e:af:7c:90:0a:bf:a8:fd:07:84:39:8e:a1:
21:7d:f8:5b:cf:de:81:4d:a5:2f:9b:d6:bc:42:70:5c:78:4d:
49:11:8c:08:52:00:35:57:6a:4f:71:d7:c9:c1:8a:45:5c:b0:
94:61:22:82:36:4e:f1:48:ad:c7:71:d6:a4:2e:61:39:2f:0f:
2a:4e:12:a2:0a:cb:73:48:d7:96:94:f1:d9:86:01:29:67:7f:
32:e8:d4:38:cc:3e:4d:79:7d:df:71:c3:2a:c3:f1:80:b7:0c:
5a:1b:94:93:97:62:77:60:5d:73:1e:d8:16:90:c4:7d:a6:4c:
ee:92:3b:c8:00:4a:4a:26:53:3b:41:55:7f:58:15:09:39:53:
32:40:04:de:25:08:28:8a:f3:8b:cd:ac:46:6d:9b:31:3a:de:
cf:f6:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:11 2025 by rpki-client