Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/296e983c-f59b-4a15-a74d-56b2bff88779.roa
File: 296e983c-f59b-4a15-a74d-56b2bff88779.roa (raw, json)
Hash identifier: L4EAbyi1pTsKYeq7cCYKFG2oWUfCzUTmAao0+U+4aqc=
Subject key identifier: 82:24:A4:6A:7C:92:55:12:63:F7:C0:3F:42:3C:16:52:48:95:51:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DF9CC4DCAD4AE6D1CE3A4EED9C2523CC5CFD79B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/296e983c-f59b-4a15-a74d-56b2bff88779.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f9:cc:4d:ca:d4:ae:6d:1c:e3:a4:ee:d9:c2:52:3c:c5:cf:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=551b56e2bd4871f1ea37dac13c425d744ff15c9dd08cbfc4173e020add571fb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:79:be:48:09:10:3c:14:e2:7e:7e:1f:19:
8c:32:cc:4d:cc:f8:67:85:2f:95:c5:04:78:8a:c2:
bb:c8:30:0a:75:e7:62:f3:c0:1c:db:4f:43:26:24:
f8:62:58:75:cb:4c:45:f9:9b:64:8c:4c:b7:cf:a4:
fe:85:50:f7:47:58:93:11:bc:fa:3a:4a:56:15:79:
d1:8e:d0:ff:de:f9:6b:04:57:21:2b:e3:af:ab:be:
4b:2d:d5:2a:d4:4b:70:3a:03:91:62:d1:54:d7:bf:
83:66:6f:fd:e5:93:76:33:6f:20:60:7b:2d:f1:0f:
22:6b:1c:66:ec:b2:a1:0a:c3:d7:f9:e3:2a:9e:38:
0d:34:67:70:d4:0c:7b:de:b8:35:fc:ad:7c:65:ec:
38:38:3f:49:ad:89:ad:56:81:26:26:01:9c:89:c9:
24:01:1b:f5:54:ea:9f:43:fb:fe:c4:10:65:ba:79:
b6:77:ae:f4:e5:5b:d7:74:a2:78:45:18:27:ac:57:
45:60:fc:3b:0a:34:5e:ad:61:03:68:3d:82:9f:94:
55:f1:c8:fc:18:58:c1:70:9e:db:78:2a:c3:46:7e:
36:22:1c:dc:49:b0:f4:8a:e5:ab:7a:fb:dd:01:4a:
7e:72:2c:a9:80:c6:11:a5:36:4b:04:4b:65:ee:fb:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:A4:6A:7C:92:55:12:63:F7:C0:3F:42:3C:16:52:48:95:51:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/296e983c-f59b-4a15-a74d-56b2bff88779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:b2:ab:8c:61:26:97:90:76:a8:61:47:5b:e6:ee:8a:00:92:
19:e1:b3:4f:31:25:62:61:b9:cb:7a:1e:9c:22:00:a3:e1:f6:
5f:bc:52:26:59:3d:e4:c7:27:51:53:5d:58:fe:d6:b3:53:a4:
ff:35:00:41:ca:46:f1:42:13:65:4c:f5:33:f3:d4:06:f5:96:
f1:81:cf:7e:33:03:d0:99:1a:3e:78:41:62:d8:95:06:a1:7d:
51:2e:88:2f:73:70:20:9d:a5:72:72:52:e4:60:61:ab:75:80:
09:f6:10:d7:48:c3:c1:4a:79:05:4d:89:2f:a0:53:4c:c7:e6:
b9:b9:3c:79:19:46:a6:ed:58:76:ae:9c:e5:3c:a1:c1:af:50:
ae:6c:d7:40:65:80:fb:ff:1c:0a:bc:2d:2d:8f:19:c7:a5:b5:
b0:b7:25:a9:b1:d5:10:aa:c0:86:8c:55:ff:a9:6e:61:7b:d2:
61:b5:68:ef:29:56:01:e4:c9:18:79:10:a2:0e:b6:56:77:2a:
04:9f:53:40:ca:70:a8:d1:bf:6b:e7:66:eb:ed:8b:b4:a9:00:
02:81:af:b2:02:d5:bc:fc:ae:30:f1:8a:00:6e:55:2f:3f:90:
c6:7a:bc:64:84:5f:c0:e5:32:51:0a:ec:8a:23:42:fe:09:8c:
2b:6c:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:48 2025 by rpki-client