Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
File: fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json)
Hash identifier: edZTMecrj2HJDkt2bP9eabEgf/eF9LhhKIqvb69/VzU=
Subject key identifier: 43:1E:3C:4D:A4:67:6F:10:A7:7C:2B:7C:C2:E6:F0:ED:68:9E:5A:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 501AC1057BC15399B5A01CC85015BC1E888039F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1a:c1:05:7b:c1:53:99:b5:a0:1c:c8:50:15:bc:1e:88:80:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=db1ab99a61ca2a203a0ffe694db06a5ced75acf64026a3fc7b1e7f6936c368ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:49:40:6f:c1:db:d4:e7:2e:36:ad:9c:cb:
ce:ae:fa:8e:6a:52:5f:1b:0e:4c:3c:74:89:3c:5b:
44:57:c1:43:47:ad:78:c9:93:ab:06:ce:ac:a6:7c:
b5:22:81:34:20:65:fe:a3:e5:5b:c6:89:74:a4:35:
bc:a9:34:af:e6:d2:ee:26:e6:6e:90:85:3f:c5:6b:
58:63:9e:12:59:8c:1d:a9:83:2c:52:52:1b:63:46:
3d:72:56:29:cc:2d:5a:77:fd:2c:37:cb:e6:79:64:
aa:c1:de:db:78:56:da:3a:df:99:e9:07:40:84:7b:
d2:57:69:e1:53:da:d6:9b:5c:f9:d7:9e:97:e0:5b:
d4:d7:24:32:ab:6d:f2:d4:c1:dd:ab:41:1d:28:31:
93:80:cc:06:e5:ac:52:eb:b6:8d:59:00:1b:ef:91:
14:4e:90:62:e1:81:16:b1:ba:87:5d:6b:d0:2a:79:
cd:af:93:c6:a2:b2:c7:a5:60:cd:41:ae:ae:ff:a4:
cb:77:38:d3:67:89:5f:12:33:f6:94:c0:f1:5a:80:
9e:fe:a5:97:7e:3b:56:c3:d5:ae:60:06:8a:8f:e0:
f1:71:da:45:42:6e:1d:48:eb:05:f4:b6:b6:c8:ce:
eb:a5:af:f8:4c:69:58:6a:b4:6b:99:ec:10:41:29:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:3C:4D:A4:67:6F:10:A7:7C:2B:7C:C2:E6:F0:ED:68:9E:5A:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2080::/48
Signature Algorithm: sha256WithRSAEncryption
62:83:79:36:2c:87:01:1d:8f:f0:6e:77:fa:ab:9d:58:cf:7a:
d8:aa:21:c6:02:9e:09:54:32:ac:ab:1f:86:24:40:48:91:4a:
64:01:51:5d:db:56:ed:7d:16:ea:af:d6:54:68:f7:27:59:26:
9b:22:e2:68:5e:13:ad:9c:63:fc:67:17:8f:7a:0c:e3:d5:ae:
e8:9f:70:37:f5:66:6e:b2:24:8e:51:9c:c4:2e:15:68:f0:f1:
e8:42:82:fc:eb:73:ea:c2:f8:18:96:af:ca:76:d6:e5:94:ec:
ea:cb:f9:06:af:b4:63:29:ca:47:d2:c2:cd:74:98:ca:9e:76:
31:97:9d:6a:f4:94:c2:5c:0c:2b:20:f3:55:aa:73:3e:de:e5:
41:ea:49:77:02:9e:69:a7:65:7d:5a:e2:08:3f:71:a0:2c:be:
0e:6d:15:24:f0:c9:af:8c:86:5b:2a:40:32:84:ce:17:ee:7b:
a0:cd:73:e8:54:c4:ab:1c:f9:06:67:20:21:6c:a6:3e:3b:4d:
7d:da:1f:81:ff:6e:9f:76:a2:d1:bd:0a:f6:94:ed:d8:d8:d0:
21:cb:ff:da:f4:ad:cb:ac:1e:62:75:c8:66:da:26:f3:b3:65:
99:11:fc:79:c2:ad:00:4c:d8:dd:c3:5c:d1:28:81:90:1f:2e:
e5:ca:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:46 2025 by rpki-client