Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cff39e2-e2f0-442f-b54d-fb69deeea22b.roa
File: 8cff39e2-e2f0-442f-b54d-fb69deeea22b.roa (raw, json)
Hash identifier: gl6lva67XODhx2S7gpIf7vYSH6H9R5jBO28leBAb3ew=
Subject key identifier: C7:C5:71:D9:27:EB:31:2F:7A:89:BE:86:80:23:97:19:62:FB:4C:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05E591BC9FEA941EA9F35AE7CA9EFF008EC6FE55
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cff39e2-e2f0-442f-b54d-fb69deeea22b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e5:91:bc:9f:ea:94:1e:a9:f3:5a:e7:ca:9e:ff:00:8e:c6:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=101ddff143f0499e31bf28ecb6637d34304e929ab1e479fd83571c00c75e2a60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:5b:d4:49:b2:e9:49:a9:71:15:34:48:39:
25:f3:65:b0:cb:f1:6c:e5:2c:cf:6d:bc:e8:92:5b:
04:86:1c:67:57:b6:23:32:71:4e:dc:bb:3e:03:80:
34:fc:8a:63:0d:19:d4:cc:d2:f6:ee:c5:44:d7:80:
48:60:eb:27:0b:fe:39:be:62:a3:91:93:87:e0:0f:
c3:e3:39:3f:78:44:8a:73:eb:92:c6:4e:49:62:bd:
fa:83:c4:0b:06:d5:e7:a4:e1:2e:3d:5b:a8:85:7f:
b0:c9:0d:7c:65:89:b6:0a:05:cc:f5:37:bb:8b:35:
e2:36:c5:0b:56:77:fc:36:9c:d3:83:20:5c:3d:93:
f6:f9:34:88:2b:7f:fd:4c:98:10:74:2d:90:9b:ce:
97:d7:a4:3b:88:55:fa:5b:33:19:7e:cb:ed:eb:37:
b4:4f:bb:13:f0:8e:51:5c:06:e9:00:41:6b:c5:ee:
3b:63:d2:32:25:74:51:a8:da:4c:2f:12:84:0e:4a:
35:a7:d6:71:d8:7e:c3:84:47:4d:7a:90:6f:be:7b:
5d:a4:45:4c:7e:04:7e:87:d1:55:c1:85:d3:ba:13:
de:2f:2d:74:52:36:a2:a1:6e:20:54:f4:e0:4f:7a:
8f:90:22:ee:0b:e2:49:68:86:0d:d8:05:33:fd:b6:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:71:D9:27:EB:31:2F:7A:89:BE:86:80:23:97:19:62:FB:4C:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cff39e2-e2f0-442f-b54d-fb69deeea22b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079:2000::/40
Signature Algorithm: sha256WithRSAEncryption
66:c3:8c:a5:45:23:5f:32:61:4b:54:fb:dd:e9:d9:57:38:7c:
be:5b:21:ba:08:9e:b1:6e:5a:85:a1:04:d3:33:6a:82:a9:43:
ca:e2:57:b5:79:c5:22:97:4b:2a:7a:e0:51:a8:28:fb:df:db:
97:b9:a5:aa:ab:e9:c6:5e:f1:15:69:6e:9b:20:b0:ed:b9:ca:
39:a2:80:b9:36:be:55:53:37:36:6e:ae:5f:65:ab:63:d1:66:
38:69:03:7d:6f:14:74:6b:78:b1:e9:08:b6:fb:fc:bf:c7:2c:
c7:09:d8:4a:82:cd:aa:aa:27:f1:3c:0e:3a:1a:b3:53:49:b6:
42:b5:a7:e4:f8:c2:0b:22:e0:58:96:0f:49:96:5f:6d:8b:99:
82:ea:1d:01:b0:78:4c:fc:b3:80:85:d4:70:86:7e:49:ef:f5:
58:ad:fc:b0:cc:a5:10:2c:93:d3:36:ff:68:d8:f7:72:e7:41:
c7:db:7e:4e:0b:44:ff:a8:b2:d1:a3:d8:af:98:c4:19:cf:87:
ef:ec:f7:15:bb:f5:21:7e:88:19:6d:fc:94:1d:16:16:59:d8:
4b:fe:90:d4:fc:5c:43:4f:3f:eb:8e:b5:74:72:e7:02:84:43:
d0:b4:02:d3:cf:45:2d:7d:b6:1b:c8:4b:f2:a0:a0:db:10:82:
ca:6a:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:11:59 2025 by rpki-client on console.sobornost.net