Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
File: ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa (raw, json)
Hash identifier: yethmO7FuKe3sFweSpwCceoWr4Gs+xElvCZfA4Vfr2A=
Subject key identifier: D1:5C:F1:4A:86:5C:95:A6:29:E5:EB:5B:84:F3:5A:F1:47:CD:CD:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B93A42E1505406307A96D2044BD5BBE7FB76F43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
Signing time: Wed 05 Mar 2025 17:01:59 +0000
ROA not before: Wed 05 Mar 2025 17:01:59 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:93:a4:2e:15:05:40:63:07:a9:6d:20:44:bd:5b:be:7f:b7:6f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:59 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:1a:f9:b0:a1:9a:de:c1:96:dc:78:78:dc:
09:7d:72:ee:a7:03:b4:24:e1:d7:ac:52:b4:12:ed:
91:af:03:27:88:f4:d4:0a:37:ae:03:0d:ea:f7:0b:
68:14:26:08:14:46:0c:0c:05:53:d3:c5:65:80:ba:
19:a8:4b:0a:85:ec:24:17:8a:37:14:10:13:3b:ba:
44:b5:9a:ac:4d:b2:87:b4:82:ed:8e:58:31:01:28:
46:ed:0e:b7:d0:eb:a5:c2:3d:19:76:ff:ad:29:c1:
34:1a:7c:41:73:60:72:e7:08:cc:4d:b5:e8:24:3f:
7c:78:5f:b9:8b:6b:57:34:6f:8d:bb:94:d0:6f:a4:
16:eb:b0:49:af:35:73:ff:a5:46:2e:ee:f6:5c:6c:
90:d3:d2:9a:2c:52:ed:e3:68:b8:a1:ff:6b:f6:02:
e2:2a:23:34:21:eb:77:1d:c8:9b:3d:5c:0d:42:26:
65:50:9f:ca:e4:33:6c:be:cd:c3:b3:87:55:3b:e6:
12:80:03:4a:d4:df:6b:73:f5:fa:1b:66:b1:72:6d:
de:97:3d:ff:55:be:3e:72:a2:61:b7:df:39:fc:1a:
a7:4a:32:86:97:0c:8d:16:43:5d:21:c6:c3:8d:9d:
e8:3e:b9:59:10:4a:bf:57:80:41:4c:1a:3b:18:0f:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:F1:4A:86:5C:95:A6:29:E5:EB:5B:84:F3:5A:F1:47:CD:CD:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4080::/46
Signature Algorithm: sha256WithRSAEncryption
1f:f2:8f:65:fe:2e:cf:8e:6b:c2:c0:c5:7f:4f:b9:8c:e6:1c:
18:35:bb:0e:fd:ba:50:ec:13:73:16:8d:37:56:b1:56:ba:89:
57:58:e8:b7:13:ed:bc:4e:f2:69:46:ee:1f:88:a7:f3:2b:1d:
de:17:49:31:04:55:2d:fc:ee:fe:7b:7e:91:3e:79:54:39:b8:
51:e0:91:d3:84:6b:f9:30:cc:a6:f3:ef:92:21:63:ba:60:35:
39:76:9a:61:7c:c9:1e:11:9b:31:3e:2c:bd:0f:98:2b:cc:cd:
13:7b:4d:68:23:47:ce:42:28:18:7b:be:bd:ee:0a:21:b6:f0:
4e:a4:f5:d3:db:d2:5f:e0:73:ce:47:d8:08:bd:bb:9b:a4:19:
32:b9:ac:ed:0a:cf:1d:6a:24:1c:8e:08:4c:35:83:6f:cc:99:
19:d3:6a:73:ca:ac:c5:b7:30:39:81:d4:72:d0:3d:cd:9b:10:
f6:67:33:e1:69:9b:72:69:8d:b4:9b:74:c5:eb:b1:1a:9a:cb:
9f:67:c1:57:3e:18:20:eb:b8:b4:5f:75:64:a6:f9:33:aa:cc:
fa:91:99:25:ed:7a:b1:a9:5c:d0:fa:52:48:d9:e6:89:ad:12:
87:ca:a6:01:c6:0f:e4:dd:af:23:26:ef:3b:11:ad:d1:a1:73:
5c:5c:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:46 2025 by rpki-client