Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: MDTbKsPaHgozrQWXHmWFGJhQwmh1Ib283rpphCd/NRo=
Subject key identifier: 15:80:EF:5B:B8:FE:9E:57:85:5D:4A:F7:43:41:C5:9E:C1:EE:9D:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FCC0BF3420F45A46595B79CCAA7607005C5ECFF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:cc:0b:f3:42:0f:45:a4:65:95:b7:9c:ca:a7:60:70:05:c5:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=82b0b94561dafe603a1792008ceaf24155c7e291d40761b980524db4569ca080, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:46:bb:28:ab:9e:db:b8:01:55:26:3a:b3:
a7:d1:f7:5a:66:4b:39:92:ef:8e:13:49:65:ee:cb:
3e:85:14:ef:e1:12:e6:d9:d1:6f:94:c6:56:02:f5:
ec:95:a4:68:1f:66:ce:04:97:cb:8f:28:2b:1a:ef:
3b:22:c8:41:d6:d4:fa:93:3d:63:87:f6:e4:86:64:
fd:fa:16:c2:d2:0a:31:61:ee:24:68:e2:e8:3b:bc:
43:fa:ed:be:81:a4:0d:a7:05:2b:f2:bc:06:b4:a5:
6f:80:b1:99:88:61:c9:35:cc:bd:4a:a6:93:2d:97:
46:ad:cd:a3:0a:13:2d:e5:cd:23:10:62:77:a8:fd:
73:5c:d1:d6:ec:b6:0c:0c:91:46:1c:81:58:fc:bd:
e4:8e:3b:2d:63:ee:ff:ff:e0:89:22:39:e3:17:7b:
9c:38:c2:b4:d8:02:56:1b:6b:2d:6c:53:54:aa:9a:
90:c3:49:0a:84:f5:e6:0c:0e:b7:a1:34:c5:d2:c1:
c7:68:6c:1c:c2:70:d9:81:5c:f5:62:41:a5:a8:81:
46:a6:d1:c0:93:0b:45:6d:8a:23:db:6b:35:5b:d7:
5e:c3:5d:d2:93:f1:78:19:42:26:38:85:0d:20:5d:
c0:07:3e:f3:a5:05:36:80:b8:ee:bb:94:39:36:61:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:EF:5B:B8:FE:9E:57:85:5D:4A:F7:43:41:C5:9E:C1:EE:9D:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:94:9e:07:d0:f2:5e:26:68:05:50:09:49:9d:7b:12:85:f4:
15:c9:60:22:28:4f:d4:b1:20:ee:b0:85:fa:36:9d:32:74:5e:
c4:77:7d:65:c4:1c:fc:10:2a:67:0e:0c:20:98:38:e5:15:15:
dc:e2:c5:22:9d:f1:30:fc:e1:a3:47:ec:cd:c0:15:0d:bf:0f:
13:a7:a8:19:f6:a3:76:92:73:0d:ee:98:a1:8f:d6:4d:1e:dc:
2a:10:b0:93:ea:19:df:b2:1c:6e:2c:36:b6:5e:ce:b4:6e:87:
3d:e2:ce:7a:1e:89:8a:82:aa:39:df:1e:35:12:dc:bc:5e:e1:
8b:29:26:03:c0:d1:b0:61:e5:19:41:b1:4c:f4:39:a7:d8:71:
ce:2d:bf:32:72:c1:33:b8:02:ba:93:63:05:35:44:a5:dc:e0:
d5:b6:36:83:5e:fb:1b:97:fe:f5:dd:cd:85:24:b2:7a:5b:65:
5a:59:93:4e:b4:83:dd:a5:0c:8e:2b:65:53:74:8c:fe:04:84:
c1:b7:9f:9f:a9:5e:51:48:8f:ea:eb:3b:08:18:4d:0d:79:92:
2b:e8:9d:ae:f4:f6:6f:47:dd:c1:2f:a6:2b:29:2a:ca:bf:36:
61:65:9b:6a:b6:96:03:c0:f5:b1:9f:e8:ad:8f:e0:dd:c0:16:
96:01:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:24 2025 by rpki-client