Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
File: 1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa (raw, json)
Hash identifier: cQ2FCwcx96rtjfHiV0sW8r/6MhhmwIgY6CF6+TcOL5U=
Subject key identifier: BE:F6:19:5E:66:00:F5:21:44:9C:66:5B:E3:9A:5B:70:C4:CD:96:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23F924F3CB5C3231DA5933697C3BB4DC8E65E41A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f9:24:f3:cb:5c:32:31:da:59:33:69:7c:3b:b4:dc:8e:65:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=7f086fd56c07a34dddf446ff3d631138c80a7bd75a29dd653ca5ff844ee59fcf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:72:16:64:3e:eb:7f:d1:08:8c:1a:14:c7:
3f:29:dd:9b:ee:ca:04:af:6b:19:8f:24:bc:c4:f9:
92:11:f8:8c:09:46:dd:d4:09:54:51:4a:a4:6b:94:
a3:37:81:1e:45:e3:6b:0d:cc:c9:dc:2f:87:ec:d4:
1b:5f:96:91:9a:e4:78:b2:58:09:6a:f5:47:cb:8b:
44:d2:60:73:3f:17:68:c1:11:8a:70:c7:5e:0d:0a:
d2:db:ce:61:2f:72:2d:8a:a9:a1:c7:5a:e3:a1:dd:
16:09:8a:90:c6:f8:ed:f4:96:8d:be:af:e5:cb:8e:
a1:e8:b6:a3:33:65:c2:b3:87:2c:e0:d1:b1:5c:84:
27:27:f4:8a:6a:82:52:b3:83:74:70:df:a7:e8:6c:
23:d6:9a:6e:b3:38:b8:6d:12:1d:ce:3f:b2:4a:6d:
09:4f:ff:50:2a:a9:d7:35:f7:af:54:5d:80:d1:a2:
68:93:a2:5f:b1:e6:ff:99:69:f0:a3:d7:81:9f:06:
00:ec:3a:d9:a7:a6:90:d8:1f:45:84:94:30:be:21:
e1:17:ba:09:2a:d0:4f:7b:66:61:a7:56:fa:31:73:
63:7d:00:63:a4:0c:99:0c:a7:ef:4a:59:e3:b4:3f:
02:9d:f9:87:3e:84:ce:20:f1:33:69:bb:d0:a6:17:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:19:5E:66:00:F5:21:44:9C:66:5B:E3:9A:5B:70:C4:CD:96:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5f:d0:14:9a:cc:8d:d2:45:39:48:ac:59:fd:c3:c4:4b:64:a9:
50:dc:ad:c3:d5:ab:1b:eb:5b:e9:ec:24:77:c9:89:df:e5:b5:
32:fc:09:74:e9:ef:0d:01:b5:3e:73:1d:4f:13:f4:09:67:be:
68:3b:4b:de:a1:85:c4:4f:8d:aa:10:bf:19:3c:72:17:59:44:
6a:05:48:77:f1:94:bb:52:76:58:c9:00:63:41:85:8c:ec:e2:
84:26:db:c2:d2:3b:d2:4f:9b:fb:3e:08:e3:86:c8:ee:9e:5b:
91:2f:2f:fd:0f:f2:92:56:42:3a:97:90:11:d3:a7:90:f4:78:
e2:e1:ed:5d:ca:7b:c6:92:bc:6b:83:22:bb:66:f1:7f:02:0b:
ee:7b:f4:6a:84:71:59:d9:24:a4:c1:cc:8a:76:12:55:7f:e2:
03:c4:88:9e:cf:0b:c4:b4:30:2c:5c:97:a8:b3:b6:01:56:97:
74:b7:65:ac:c5:1f:e9:98:c7:8f:97:81:b1:50:24:43:4e:e9:
75:ba:b8:d9:4d:c5:89:55:bf:ec:90:e6:e8:32:ff:54:d8:9a:
49:45:7e:37:78:2c:6d:88:b0:ab:7d:e3:a2:1c:f8:fa:d9:a5:
f3:25:3d:5a:d6:90:2a:9d:26:d3:c1:f0:d4:6e:b0:b3:db:d6:
6d:ed:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:12 2025 by rpki-client