Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7caaf316-225a-49cc-a12f-2d0e1fec97d9.roa
File: 7caaf316-225a-49cc-a12f-2d0e1fec97d9.roa (raw, json)
Hash identifier: elzfNoniIy+fWpY6AySftisscx1WOcinyRZo/G6R8Lg=
Subject key identifier: 39:4A:72:73:D0:8A:D1:C4:EC:E7:82:32:BF:49:D2:FD:28:52:34:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DCD3F9068B18DD266FDED2D7B562F3E20C0D175
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7caaf316-225a-49cc-a12f-2d0e1fec97d9.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cd:3f:90:68:b1:8d:d2:66:fd:ed:2d:7b:56:2f:3e:20:c0:d1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=442cbf5c763e540f0e56a764504e6e33498aee611e16107797fa511756d2e83f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:57:7b:92:66:d9:b9:2d:3e:6a:00:d6:bb:
97:0c:18:ae:4e:7b:3d:61:da:a6:0f:3c:a4:83:dd:
99:a8:f3:aa:04:05:50:d2:9c:00:51:e2:06:df:1e:
8a:a1:04:12:94:e0:5e:16:52:4a:ff:c9:cd:1a:53:
61:7c:9c:df:a6:6d:79:4a:54:17:2a:cc:4e:18:c8:
a2:de:f2:8c:f6:58:98:21:cb:c7:f5:87:13:2d:92:
90:18:82:c7:8f:0d:f3:f3:5d:72:f9:77:28:b6:70:
e3:cd:19:65:b4:8a:dc:a9:87:51:71:72:bf:8a:72:
4b:bb:96:dc:a2:8b:68:bb:8e:18:3d:4d:69:bb:cc:
53:00:a1:8f:2a:42:d7:42:bf:94:68:d7:29:e0:9e:
f9:b0:34:e2:2d:e2:02:4f:5b:d3:b7:0d:e9:83:c1:
e3:0c:28:df:70:41:af:09:ab:d7:c3:1d:8a:fb:fe:
45:76:7e:f9:71:41:91:16:74:7f:aa:fa:5a:b9:ad:
54:22:b0:16:53:3d:26:fe:8a:1c:53:0f:e3:66:42:
5f:60:0f:4b:64:08:1a:cc:09:a9:55:4f:77:41:de:
8d:2c:da:23:a1:71:3e:ce:a1:b3:e1:ed:50:68:06:
c1:49:df:44:b4:eb:79:3b:b4:00:bc:84:51:91:47:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:72:73:D0:8A:D1:C4:EC:E7:82:32:BF:49:D2:FD:28:52:34:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7caaf316-225a-49cc-a12f-2d0e1fec97d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:a000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:81:2c:d2:4b:8f:71:58:e0:73:45:90:74:25:9f:29:31:7f:
b2:e6:d5:77:b1:c1:d4:05:5a:03:89:7d:f5:b5:27:70:db:ed:
c2:21:cc:9d:aa:c0:3e:0c:cc:cf:9a:5d:4a:54:8d:54:58:f1:
12:d8:3f:a1:f4:0a:4c:56:fd:2e:db:41:05:6b:81:57:34:d6:
dc:af:52:a7:69:5b:fe:d8:21:ad:d7:73:80:95:52:f2:c7:8a:
2b:9b:cc:be:58:46:81:3b:e3:81:fe:3d:98:8d:1c:9a:35:70:
ad:f9:23:05:43:17:d0:c7:9d:45:3b:21:8d:b5:39:c6:95:7b:
e3:9c:3f:bc:a1:ca:1a:1a:a4:fc:61:16:30:cc:c9:00:54:da:
48:8e:df:83:fc:41:fa:a8:33:9c:54:60:97:2b:d8:ba:a3:ce:
6f:83:0b:ed:97:b7:a4:34:7f:02:05:d3:03:d4:d4:44:09:a4:
cc:47:fe:0c:a8:d1:09:4f:5d:68:26:bd:b2:97:b5:fb:30:f0:
ec:e7:14:e0:6c:9a:5b:5a:aa:a1:4c:9a:59:04:d1:26:f9:41:
5e:3d:35:5f:ab:8d:e0:1d:35:b3:16:05:2a:0c:93:48:f0:83:
cb:a3:a5:5c:28:8c:02:b1:b4:6c:94:19:39:56:59:aa:68:9b:
3f:a1:e6:57
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHc0/kGixjdJm/e0te1YvPiDA0XUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ0MmNiZjVjNzYzZTU0MGYwZTU2YTc2NDUwNGU2ZTMzNDk4YWVlNjExZTE2
MTA3Nzk3ZmE1MTE3NTZkMmU4M2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkZV3uSZtm5LT5qANa7lwwYrk57PWHapg88pIPdmajzqgQFUNKcAFHiBt8e
iqEEEpTgXhZSSv/JzRpTYXyc36ZteUpUFyrMThjIot7yjPZYmCHLx/WHEy2SkBiC
x48N8/Ndcvl3KLZw480ZZbSK3KmHUXFyv4pyS7uW3KKLaLuOGD1NabvMUwChjypC
10K/lGjXKeCe+bA04i3iAk9b07cN6YPB4wwo33BBrwmr18Mdivv+RXZ++XFBkRZ0
f6r6WrmtVCKwFlM9Jv6KHFMP42ZCX2APS2QIGswJqVVPd0HejSzaI6FxPs6hs+Ht
UGgGwUnfRLTreTu0ALyEUZFHiUkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ5SnJz
0IrRxOzngjK/SdL9KFI0xjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2NhYWYzMTYtMjI1YS00OWNjLWExMmYtMmQwZTFmZWM5N2Q5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HCg
MA0GCSqGSIb3DQEBCwUAA4IBAQCmgSzSS49xWOBzRZB0JZ8pMX+y5tV3scHUBVoD
iX31tSdw2+3CIcydqsA+DMzPml1KVI1UWPES2D+h9ApMVv0u20EFa4FXNNbcr1Kn
aVv+2CGt13OAlVLyx4orm8y+WEaBO+OB/j2YjRyaNXCt+SMFQxfQx51FOyGNtTnG
lXvjnD+8ocoaGqT8YRYwzMkAVNpIjt+D/EH6qDOcVGCXK9i6o85vgwvtl7ekNH8C
BdMD1NRECaTMR/4MqNEJT11oJr2yl7X7MPDs5xTgbJpbWqqhTJpZBNEm+UFePTVf
q43gHTWzFgUqDJNI8IPLo6VcKIwCsbRslBk5VlmqaJs/oeZX
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net