Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
File: fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa (raw, json)
Hash identifier: VxcXajGmiDPtrVYHLS2cXx+fqVUwa1zmmDHneKPk8xA=
Subject key identifier: A5:F9:50:CB:7F:B9:6E:44:06:AD:51:96:3A:82:AB:8A:FE:07:ED:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D0784E751EEC4114BB61474FADDB0B2DBA2BA59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:07:84:e7:51:ee:c4:11:4b:b6:14:74:fa:dd:b0:b2:db:a2:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1c15061d27942c89da332a996f4f3bd4fc05f1c6299e0799605ea151165473b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:87:e4:92:11:a3:7f:59:6e:43:b7:3d:09:
b3:7a:4b:eb:02:8c:b7:c5:d6:1b:17:54:01:b3:ed:
82:f8:f3:3a:23:57:ba:75:7f:23:c2:e2:0f:2b:5c:
81:df:6f:da:25:97:10:9b:af:1c:0e:af:5e:35:15:
17:41:19:05:b6:1e:24:29:76:5e:09:45:e2:60:8e:
45:58:1a:d6:42:b3:05:18:41:81:d3:a1:2a:cc:bb:
dd:f9:a9:a8:7d:c7:5a:16:69:5b:b9:e6:bc:72:bd:
ac:35:f0:fa:c1:ff:ea:36:9a:1f:dd:62:2f:0b:dd:
69:3d:5b:23:d2:a8:a5:97:b6:60:84:31:a6:dd:95:
c8:68:a8:48:e0:f9:d7:02:ce:98:f1:33:f8:2f:10:
33:c8:ee:87:56:61:b3:94:bd:29:2c:5f:35:76:23:
3f:91:56:80:7f:ca:43:5e:70:7a:ce:d6:8f:4a:e7:
59:0c:51:3c:8e:5b:dd:bc:a2:ca:37:15:ab:85:b1:
c6:e3:69:f4:6d:9c:63:5b:46:79:d7:51:c2:59:6d:
59:22:a5:3d:e0:7c:5e:81:ce:4f:a4:4b:37:75:ad:
ab:ab:4d:42:d4:d5:9b:f5:51:0b:ed:11:19:ca:cd:
11:c9:cc:5e:ef:84:30:c2:ae:42:2d:71:93:c9:32:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:50:CB:7F:B9:6E:44:06:AD:51:96:3A:82:AB:8A:FE:07:ED:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8000::/40
Signature Algorithm: sha256WithRSAEncryption
30:06:6d:ca:71:8d:a6:b6:c2:27:87:1c:75:d9:fe:59:49:bd:
de:80:83:7f:00:38:7f:a5:09:a9:6e:da:df:e0:c1:b4:eb:ea:
7e:94:3a:4c:09:dc:f6:48:d7:dd:05:65:e1:aa:eb:e6:4a:87:
4d:0b:11:15:b2:cf:1b:e6:ff:a0:61:a8:1e:87:ce:80:0d:bc:
58:ac:4b:25:34:ea:2b:2f:b8:b1:06:3e:c1:49:da:66:9f:15:
4c:cf:c5:37:0a:f2:aa:cb:6c:e0:f3:e5:5f:34:5c:44:87:5e:
15:7c:40:04:e8:8d:fa:8f:5c:0a:07:0d:5d:43:f2:8c:e3:98:
8a:4a:0e:9b:ff:6e:18:7b:04:9d:76:3c:d8:6d:ce:d6:5f:46:
8e:b9:1c:16:1f:eb:79:76:a1:3e:15:b5:97:04:8c:67:50:26:
3b:72:b9:cf:2c:c0:4a:dc:5f:47:1f:ea:22:af:b5:ca:99:b2:
84:48:a0:4b:a2:b8:37:2b:60:63:66:fb:7d:5f:bb:64:59:de:
28:17:bc:5b:a2:40:52:69:95:94:00:32:8f:0a:cd:14:fa:92:
3a:8e:d5:78:44:8f:30:02:78:5f:52:fa:2a:77:f6:88:6a:2e:
75:90:8f:d1:0b:c9:17:e6:0d:58:a2:6f:e4:15:d2:12:88:1d:
cf:3e:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:56 2025 by rpki-client