Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
File: 4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa (raw, json)
Hash identifier: JB/eTfx6oHX8X/Tcx9XbDUZs2xUDQLeP4LudxZeHeZc=
Subject key identifier: E7:A5:92:F0:6B:E2:CB:D9:D2:F3:BB:BA:E8:8B:AF:15:BD:7C:C3:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A5D9C9A06B5C945C99C88B441EEF6C3FBC3C756
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5d:9c:9a:06:b5:c9:45:c9:9c:88:b4:41:ee:f6:c3:fb:c3:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=569dea910bab2f68c8b1f9fa74b17d73b1309b9e2cd909b2b9e07673c66e209c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:91:af:f6:12:03:c8:f0:82:c9:82:10:da:
db:6d:75:26:f7:a0:d1:f7:dc:09:e8:6a:b0:00:14:
e7:e4:89:8a:27:0c:55:08:c3:48:8d:66:56:c3:14:
bb:11:86:3e:0a:cc:1e:5f:78:cb:9f:2b:80:c7:fc:
3e:ed:0b:fe:a4:c8:63:c1:aa:4b:7b:e8:68:b6:53:
44:b1:58:4e:d6:e0:af:27:84:ab:fc:5e:2a:10:8f:
4c:f8:7c:ec:22:93:01:f1:82:c9:aa:b7:ad:56:cd:
01:40:7e:5c:d7:f9:90:fc:9a:24:ca:aa:6e:af:39:
2e:ec:ca:5d:91:20:05:ff:68:3b:ed:1a:2a:01:98:
3d:d9:11:d3:a8:90:13:5b:1e:b5:ab:cc:5c:11:59:
7c:39:ae:cf:37:9f:68:0a:fb:40:f8:1f:3d:2d:6c:
f8:02:02:dc:51:25:b5:d4:54:e0:ab:d0:43:bf:08:
7f:b6:58:d4:b6:f8:bc:a2:1c:f3:2d:6c:c8:f0:e0:
ae:b2:fe:41:c1:32:d6:41:bc:18:62:29:75:33:2e:
49:4b:a1:d1:ce:65:28:ee:ae:8f:9d:42:21:c4:97:
8f:97:b0:37:72:7c:dc:2a:ec:3c:56:69:6a:81:62:
ed:ac:dd:ae:d9:b8:8e:9c:4b:5a:a3:4f:be:a0:24:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:92:F0:6B:E2:CB:D9:D2:F3:BB:BA:E8:8B:AF:15:BD:7C:C3:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
af:1c:73:04:9a:64:73:f0:cf:bf:98:96:4f:99:4a:dc:75:7e:
e7:6c:66:92:ea:d5:49:11:26:4c:0e:3c:df:27:89:36:80:a9:
51:52:51:f0:d8:58:47:13:42:e2:a4:17:f7:99:dd:61:26:af:
6a:c4:b6:47:de:e8:9b:70:a4:05:d5:98:d8:b8:cf:09:c9:cd:
f9:ec:1e:d5:e7:1e:05:6c:62:9f:38:22:47:d8:02:3c:94:59:
7e:78:e5:0f:79:9d:67:2f:53:78:30:00:39:5a:eb:6b:f3:66:
03:e3:6d:5b:13:f7:e5:15:f1:48:dd:4e:c0:65:e0:b8:13:3c:
7b:61:45:c2:45:a0:bd:1e:6d:3b:c9:cc:24:a6:46:6d:44:44:
74:9a:86:07:60:29:53:58:e4:eb:02:3d:46:1f:7c:47:28:ac:
cd:4d:2d:94:fd:03:bf:30:2c:af:7d:a5:84:79:fc:32:c6:a8:
99:dc:cb:0c:96:2e:a1:44:b1:7f:94:a8:83:6b:ed:d7:96:ff:
a8:99:af:8b:54:fd:40:23:80:77:01:f4:d5:25:be:f2:a6:17:
43:0d:c1:83:2d:df:1a:4c:a2:3f:3e:3a:99:72:0a:59:eb:16:
e5:ef:93:10:1a:c1:0a:09:11:10:c5:bb:1d:58:5b:3f:35:a6:
ee:39:d2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:57 2025 by rpki-client