Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
File: 4b12830e-a860-4a14-b52f-5284626c1a96.roa (raw, json)
Hash identifier: jKmZFL5th3cWSMCC0GCvIDObPs3GfydNOQQNrLrHtqI=
Subject key identifier: A4:84:43:49:E6:27:40:8F:0F:44:A6:8A:08:56:2C:FE:8B:65:5F:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 314E2729EC762BDFD86237C0692B82FCF4657E47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4e:27:29:ec:76:2b:df:d8:62:37:c0:69:2b:82:fc:f4:65:7e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=07fd0230df5bd3a0ba2fb1abde4bf4f8c881aac3698b3fa0cfba0c9fae2515f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:24:4a:a8:8f:ba:a7:0f:b5:df:ea:02:23:
e3:38:a3:1a:d9:a8:13:0b:5e:81:7c:58:e8:c6:a0:
03:f3:d8:46:15:ac:24:f8:87:6c:e8:ba:ec:5a:b3:
a8:72:c0:5a:5e:23:75:24:8a:00:26:0d:32:16:47:
e8:84:80:ff:c8:f6:3a:c6:ba:89:42:e4:9e:50:69:
68:bd:b4:3a:c7:2a:e1:2a:ba:f1:89:24:3a:e0:53:
f4:af:bf:fa:51:7c:3c:7c:9d:64:b9:4b:ae:a8:4f:
19:f1:29:4f:3e:36:d2:95:30:8b:4b:97:c1:a3:f5:
f3:66:5e:0b:a4:91:43:e9:2e:a3:70:05:bc:6c:03:
9a:bf:0c:b9:3c:8d:72:7e:dc:0c:f9:71:ec:27:37:
59:ed:0f:cf:64:44:06:85:ad:0a:6e:85:6d:9b:be:
5f:6b:53:41:29:a8:81:64:2c:44:b9:72:f3:49:e2:
68:61:dc:51:79:01:88:d2:a9:75:94:ae:e6:10:e8:
2e:bb:ae:f7:5b:d8:f1:02:4d:b0:45:fb:d8:95:27:
80:83:0c:58:e9:d1:6d:ae:a1:5c:91:03:63:f4:59:
cb:02:f0:92:9b:c9:9a:5b:35:37:7f:e4:40:28:2d:
f8:d5:5e:c8:66:97:74:44:2f:3e:5d:f0:fc:b9:29:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:43:49:E6:27:40:8F:0F:44:A6:8A:08:56:2C:FE:8B:65:5F:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:4d:f9:41:1a:67:22:b6:80:76:f8:d3:1a:f0:b5:2c:d4:83:
03:c7:de:a5:4d:ef:a2:2d:a7:a6:fe:f1:99:96:ae:1b:d9:e8:
13:13:37:7a:58:fb:c8:f8:53:d5:93:c5:da:ac:68:ad:a9:9d:
cb:22:cb:ad:95:63:72:d1:75:08:ac:48:da:44:e3:23:3a:27:
c3:39:6f:7a:6f:f8:66:40:8a:90:29:38:d4:0e:b0:4a:65:a4:
79:44:5c:0b:86:7d:29:b0:9a:df:83:a2:bf:d0:68:e9:3e:38:
c1:ca:1c:93:22:d1:5e:5e:01:25:22:1b:2f:9e:3b:5d:28:0f:
4d:dd:1d:b1:d5:02:5a:00:c9:13:47:82:28:56:44:80:db:ec:
1c:3f:af:0d:35:92:bb:2f:d7:80:62:20:20:f4:4c:38:f4:16:
26:c5:79:7d:c9:d6:2b:10:83:b0:0d:94:d0:99:b3:35:45:f3:
a9:85:50:3d:ad:96:09:c4:e5:a0:17:de:fb:f0:ac:09:59:af:
b2:15:8c:35:89:77:5d:ba:6e:5e:61:e2:cc:b1:fb:48:84:96:
29:81:33:4d:9c:d3:dc:53:c9:eb:96:09:0e:91:9d:17:ce:cd:
4c:12:8c:42:36:16:91:c3:38:d4:d7:9f:d2:9e:23:21:65:55:
e5:1c:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:03 2025 by rpki-client