Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
File: f76388e2-5824-485d-aa99-c7ea5a481aa2.roa (raw, json)
Hash identifier: aQFI8oroBY2qiPnFnVslD4OMzfVvDp+OxI+rksnPW9k=
Subject key identifier: 10:D0:40:2B:89:9E:1D:C5:07:B1:B6:01:EC:46:4A:EB:D8:B3:6A:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D9AD663458B3106ACC49BE472A9C51BC3C2FCD2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9a:d6:63:45:8b:31:06:ac:c4:9b:e4:72:a9:c5:1b:c3:c2:fc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ff87d405d4392723f573c3d7cca3b08ee8562bb818f660d65602660e3f5c68df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:3e:d1:2b:72:6e:f5:96:cd:4c:80:e2:33:
ff:b7:bc:13:a4:5a:8d:1b:23:a4:50:95:9c:e0:68:
26:c0:ab:a6:5e:57:3f:24:04:dc:0e:31:88:77:6a:
59:74:2d:de:89:1b:57:3a:09:81:c8:20:9e:c6:d4:
94:aa:c6:40:fa:b1:ef:d5:14:92:90:c8:03:ca:f8:
a1:5a:49:71:bd:cb:43:0c:e3:73:84:f5:1f:a0:1a:
78:33:de:9f:5d:f0:8a:8a:71:dd:47:09:4b:01:fc:
7c:ee:9e:09:38:71:5b:27:bf:ca:02:27:06:81:a5:
a7:62:a1:d4:b7:8f:17:cc:83:05:a1:51:26:e6:bc:
62:a5:76:a8:2e:a6:93:ec:b7:48:b6:01:19:9b:90:
dd:97:a3:b6:1d:25:7a:52:0b:06:f6:c8:1e:7b:17:
29:07:1a:58:b5:c1:b6:d5:b0:67:45:55:17:09:b8:
f0:c3:5f:cd:e2:bf:aa:2a:2c:4b:e2:1a:8d:12:6b:
57:ff:fe:65:8f:01:d1:c5:1b:fd:73:e5:9b:27:da:
25:7d:4e:2f:79:f3:55:ff:27:8e:a1:b2:89:bb:36:
af:f2:8d:8b:08:b2:a8:dc:68:8a:79:1a:be:0c:04:
ab:dc:90:f8:18:cf:7c:2e:9c:7c:3c:ca:7f:35:34:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:40:2B:89:9E:1D:C5:07:B1:B6:01:EC:46:4A:EB:D8:B3:6A:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:a0:02:1b:f8:be:61:0e:2f:e5:e0:51:c6:f2:de:37:dd:af:
8c:62:b4:df:06:98:c7:a7:b9:6b:18:aa:fa:42:78:31:0f:67:
07:4f:b4:93:38:65:6f:1c:b2:56:54:7e:85:ee:0e:a3:30:32:
e4:29:a0:d1:6d:a2:8e:00:a6:2e:42:3c:c8:6b:95:cf:de:97:
38:ed:9d:5f:b6:00:a9:74:65:30:27:98:ff:ff:3b:be:b4:6d:
c1:8d:49:d9:46:bc:ce:b5:45:87:a6:5b:e6:b3:d3:93:04:47:
88:3a:f9:70:e6:be:84:d1:66:fc:45:bb:f3:90:ac:56:fc:ca:
d6:12:d3:f8:3b:15:38:f9:51:b5:0a:bd:68:c2:19:24:2a:55:
27:00:80:cd:5f:fe:9f:6a:ec:33:08:77:c9:d6:6d:41:92:85:
91:49:bd:8e:bc:2e:8b:36:5e:93:7d:c6:a8:95:ed:89:59:21:
40:92:d7:37:0f:3a:2d:de:2c:f9:21:b6:b0:28:39:05:ab:e4:
e6:29:75:de:bc:36:46:57:54:74:d9:0b:e7:cc:6d:e2:ca:3f:
83:23:0b:e9:d6:e8:45:97:36:84:3d:74:55:ec:75:77:89:ad:
3d:ae:5c:53:9b:dc:1c:d1:a5:9f:44:25:d5:5f:17:c3:50:c7:
93:ee:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:23 2025 by rpki-client