Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5bcb30c5-2ff7-4730-914b-9d1a18172246.roa
File: 5bcb30c5-2ff7-4730-914b-9d1a18172246.roa (raw, json)
Hash identifier: lrmbuD4Gj8HbTBuvnFtEdbycjo0AkgCTVN/U6gGa5JI=
Subject key identifier: 43:63:2E:9E:C1:7E:60:F6:A7:75:62:E7:47:12:F6:4E:E7:89:58:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E2F0EC2F9DB68CFE8CE5E14535112E5466AF038
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5bcb30c5-2ff7-4730-914b-9d1a18172246.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2f:0e:c2:f9:db:68:cf:e8:ce:5e:14:53:51:12:e5:46:6a:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=a6a2c39c34a821db6546e86eeb5d3747013d70261cf44309add364c153d983e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:0c:81:1a:e0:44:e9:f6:be:f9:82:b1:cd:
51:b0:15:54:df:de:60:58:60:82:b4:5d:33:3f:96:
3c:43:6a:e4:7d:fc:98:31:07:ea:fe:69:50:23:2c:
0c:35:cf:b9:54:fa:82:bd:d4:e5:87:38:c6:44:e8:
af:d0:88:56:f0:c0:6a:f5:0b:4f:98:59:07:33:0b:
27:e0:5d:90:50:c2:11:f0:fe:3e:e7:e5:d2:4d:cf:
3d:4e:a3:22:1c:66:b2:3b:fd:29:a6:91:ed:d8:dd:
ac:a9:5a:c8:88:37:d0:e4:94:f6:04:56:d5:e3:7e:
ca:6c:8a:a1:5d:80:f9:f2:68:92:fd:31:99:8a:31:
d6:ea:54:36:11:75:6c:fa:4f:61:57:f6:1e:57:28:
e3:17:c6:e6:32:b0:96:40:f2:6f:77:3e:33:f4:80:
56:67:81:7c:83:e0:8a:13:5b:78:d7:72:75:98:9b:
f3:28:48:21:ad:5a:30:bc:08:2b:61:dd:8b:3e:64:
8e:ee:cb:ec:35:49:43:6e:5f:a4:5b:67:36:ad:27:
b4:d1:63:8e:45:cc:02:2e:b8:53:16:6d:36:fe:b3:
00:7e:c6:bd:6f:42:b4:92:ea:30:f3:e1:a1:91:44:
03:c2:f6:60:e4:cd:1b:39:0a:37:ef:f0:2f:37:b6:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:2E:9E:C1:7E:60:F6:A7:75:62:E7:47:12:F6:4E:E7:89:58:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5bcb30c5-2ff7-4730-914b-9d1a18172246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5000::/40
Signature Algorithm: sha256WithRSAEncryption
9b:57:24:6e:90:2e:bd:64:90:c8:16:87:55:99:d2:de:39:c4:
fc:5e:1e:7b:50:1c:1c:dc:4f:94:c6:0e:99:e6:89:6d:9e:0e:
23:a1:db:72:4d:0a:dd:64:06:50:72:37:af:ac:c6:77:55:bc:
fc:99:c3:da:95:15:ef:5a:6b:5e:bc:6f:4c:46:21:f7:c4:f1:
d0:52:0c:9c:6e:ab:bf:65:75:2c:bf:b1:ec:08:65:b4:37:6f:
17:be:83:e2:d5:15:a6:2c:38:33:f2:c3:65:c8:91:40:5b:05:
bf:59:2d:e8:41:3d:1d:1a:38:45:6b:4a:28:24:35:7b:d0:33:
49:91:e1:c9:e2:0a:ae:bc:16:86:d8:50:84:4d:06:40:9d:56:
fc:93:9e:b3:6c:f8:a3:e1:6c:fa:c6:5a:12:4d:03:a1:3d:f0:
cd:c0:b8:9a:7d:7e:ed:dd:15:a0:33:cf:41:42:1a:ce:96:3a:
80:4a:20:ec:83:02:34:ec:93:d3:af:a9:4b:22:86:d1:28:41:
95:54:d0:44:d9:9c:12:1a:54:81:64:81:15:85:40:d9:fe:cf:
34:87:55:f4:09:45:ed:a2:c3:a8:0d:24:0b:92:e5:de:5d:d9:
44:da:cf:98:d4:dc:ed:28:78:75:5f:04:a7:fa:8a:ee:8a:9f:
04:4f:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net