Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
File: fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa (raw, json)
Hash identifier: rYzodVqeEzSk2LDi6TFVnVVourfRLuaCYwBg0Hfu/6E=
Subject key identifier: 94:7D:8B:A6:03:E0:D5:FD:11:F4:29:A5:12:57:6B:EE:0B:3D:80:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10949AB0C1FCFF2F612D76DA8E617C407444EDCE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:2080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:94:9a:b0:c1:fc:ff:2f:61:2d:76:da:8e:61:7c:40:74:44:ed:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=c87c8e5f8a258faad36645d792485917c403b8fb05bc4ebd7b658e45d25a370a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:71:48:49:ba:81:f8:9e:be:af:80:82:2b:
fb:52:bb:4e:13:96:cb:ea:ac:e3:cb:c1:a3:04:33:
9a:40:5f:01:e8:f0:f2:d3:db:84:97:23:88:65:23:
e8:ac:5b:df:fa:16:ef:a3:11:07:16:1e:41:9a:05:
09:1a:58:ee:be:22:a0:65:9a:cb:9c:a3:5f:13:47:
0c:85:90:05:35:87:16:97:b8:78:50:05:f7:27:64:
6a:cc:20:a3:70:ba:7c:30:51:cb:64:46:a4:db:f7:
26:09:17:54:22:c7:f3:f2:f4:79:3c:67:02:0e:ee:
2f:06:51:ae:26:ca:bd:92:7a:de:9d:b0:6a:a7:fc:
c7:90:83:b0:7a:10:18:0c:be:f4:06:5c:ca:11:26:
b0:a9:af:ca:26:7e:ed:6b:a8:c1:0c:90:8c:e4:09:
2e:28:03:de:29:f3:4f:01:aa:c0:d2:6c:fe:8a:08:
da:cc:e4:45:11:5f:55:03:69:ba:9b:95:07:03:c7:
7f:9f:60:c2:e9:1a:5b:a7:eb:d9:d0:49:85:33:30:
f0:69:d3:35:18:fa:cd:96:d5:a1:8c:87:a6:41:05:
a3:8f:5e:1a:80:0c:91:db:34:46:ac:d2:ce:8e:87:
67:34:7f:11:c4:15:36:ff:4b:d3:6d:cf:ab:02:70:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:8B:A6:03:E0:D5:FD:11:F4:29:A5:12:57:6B:EE:0B:3D:80:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:2080::/46
Signature Algorithm: sha256WithRSAEncryption
6c:e8:06:2c:d2:99:42:35:5c:12:c1:6f:3e:f4:fa:81:12:73:
f9:28:73:f6:c5:1c:77:4d:a9:00:83:33:6d:b6:bd:b9:73:56:
48:ad:54:4a:6e:2a:4d:e6:e5:b2:23:23:68:f1:d1:b8:38:c8:
8f:6a:56:71:f9:a4:1f:a0:c2:45:2d:4e:ef:9b:ba:c3:64:36:
36:41:f9:78:d7:9c:c5:cf:e2:51:1e:dd:b7:63:3a:6c:ad:05:
13:4e:52:cd:9f:be:de:a0:b4:58:9b:99:34:12:39:f2:5d:8e:
11:37:5a:a9:44:b3:fa:e8:82:d0:99:d4:e9:38:a1:7e:65:21:
94:81:de:a2:38:ce:a2:07:68:f2:7b:3c:74:ab:c1:ae:7a:60:
79:a5:ae:13:ca:08:63:aa:44:25:6c:b3:fe:8c:5f:a8:76:01:
19:eb:1d:62:aa:1b:e7:48:90:36:c0:fa:8a:9a:48:54:d0:38:
43:21:0c:d9:fc:c8:bb:0d:40:d6:38:5a:f1:af:80:fa:1c:f3:
47:fe:c8:98:9e:7d:d6:7b:5a:96:79:9a:51:62:97:3f:29:8a:
5d:9b:f7:52:06:1e:48:70:42:26:14:39:01:57:cf:43:5e:3d:
a6:d2:34:54:9f:41:24:3c:0b:0a:4b:ae:fb:0c:65:8a:8b:c9:
42:9a:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:59 2025 by rpki-client