Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa
File: 37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa (raw, json)
Hash identifier: 53fr8r3NslFhfosUqdZvB/kBb3rHL/IKGnpNYjhJkpE=
Subject key identifier: 02:E1:C1:8A:AF:31:2C:9B:78:57:01:E7:12:41:F3:E2:65:F0:BA:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DB5BBD37C6A0EAC538600EDA43455549EA5FF72
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 185.48.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b5:bb:d3:7c:6a:0e:ac:53:86:00:ed:a4:34:55:54:9e:a5:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=452c4a606ea422a58ee26785a2edcc6150c2091a4e533af918a837e79420748c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:58:75:06:97:1a:19:3c:23:50:64:bb:ee:
09:cd:79:73:78:8b:b3:72:d4:a3:ae:a9:46:d9:87:
10:3d:91:9e:8c:74:e8:96:5b:a7:2e:48:8f:d9:1e:
97:a6:93:74:e1:23:38:86:f1:27:24:f2:ea:bb:d3:
9e:4d:26:c7:d6:48:f9:fd:2f:4b:70:be:18:9e:b1:
17:54:b7:98:cc:c5:b4:84:a3:3d:33:6c:68:45:50:
a8:4a:d4:f9:cd:1a:35:4f:3e:0a:9a:92:d6:d5:76:
e9:2c:15:d6:74:8b:f2:e9:e7:8b:73:b6:13:3b:9e:
3e:5b:36:61:a9:d1:fa:cc:da:e2:ef:6d:c1:b8:cb:
52:3d:fa:61:48:10:df:fc:ad:f7:e8:c2:b8:59:82:
b4:64:55:c7:54:81:9c:21:fd:6a:90:78:46:44:5b:
9e:87:34:ec:bb:28:d5:33:2e:8e:b2:fe:23:8c:79:
4f:1e:e2:02:63:92:16:46:45:ac:a2:9c:3c:4d:34:
a3:13:50:1b:1b:b2:82:7f:fc:70:b6:5e:86:b3:e0:
cb:c5:23:09:96:97:d5:95:7c:64:8b:69:6a:38:8f:
7a:8f:89:6d:bd:7f:09:0b:1a:73:dd:24:9a:9f:eb:
54:ce:cb:9e:cd:97:23:04:6f:fc:99:cb:a5:7e:4d:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:C1:8A:AF:31:2C:9B:78:57:01:E7:12:41:F3:E2:65:F0:BA:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:8d:68:62:b7:e9:65:2f:8c:be:a8:d8:5f:e9:7e:fa:cb:d9:
3e:05:a9:f1:c7:6c:5b:cb:c0:9a:64:50:81:b0:da:4b:83:6c:
64:72:22:71:e3:4b:07:e5:95:bd:98:f1:0b:c1:46:df:5e:0a:
71:67:ae:62:48:2f:aa:3d:30:fb:36:59:bb:3a:0e:ea:d1:90:
56:41:a8:8e:f4:3b:57:f8:68:41:11:7a:a4:86:ee:7b:81:cb:
bb:f8:92:16:55:93:0c:07:22:81:f6:f8:91:27:40:72:c5:3f:
69:df:f7:96:ff:3b:6c:b1:2c:86:a6:48:35:52:02:75:24:d6:
1b:d0:e1:3d:80:25:7b:95:db:7c:27:d1:37:77:87:77:ee:cd:
ba:90:3e:f2:52:45:8d:97:bb:e4:a0:53:f1:f4:b5:06:69:4a:
c7:e1:b5:3e:1a:d1:32:b4:16:ef:17:24:5e:10:16:28:b1:2b:
dc:04:f8:6f:a9:7e:2e:0c:d8:53:11:2d:de:a9:bc:bf:97:b9:
eb:59:e2:02:f1:61:59:9e:3f:2e:84:32:09:80:39:f6:4b:72:
d8:29:69:2e:21:f7:6c:de:c4:ea:8c:f0:dc:f5:f8:23:d8:30:
db:5f:c0:df:10:9b:cf:14:ba:b2:3d:68:6b:72:19:84:54:42:
ca:7e:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:19 2025 by rpki-client