Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
File: 53380a08-b071-4729-9c41-f9a83d36f4c0.roa (raw, json)
Hash identifier: Y6ORrGuv22rKNKcc0wrXdcEgNIKlhdDi2Du1n6EhVko=
Subject key identifier: 63:E7:F5:1A:9C:BF:80:F3:C4:EE:61:44:BC:79:55:DF:44:54:0E:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0952AC9CBB787C90BD234D0E3BB036E52E2F805A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:52:ac:9c:bb:78:7c:90:bd:23:4d:0e:3b:b0:36:e5:2e:2f:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=ceed8c4656ded565504f5b5008dee4d2286c7df1f75e82f0808c5c68adfa8969, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:c4:3b:fc:7c:c7:e7:c4:eb:0e:60:aa:5e:
78:eb:f3:62:a5:08:cf:65:fe:d9:e7:e4:c1:87:d6:
32:a6:1d:8d:21:97:27:9e:af:92:a0:7e:4d:55:17:
18:0a:b5:d5:64:76:d6:a4:4b:d7:8e:18:b0:41:0b:
d4:bb:cc:f8:d9:cd:57:dc:2f:fa:f6:fd:32:f1:e2:
9f:77:79:64:c6:cd:95:ec:41:ac:60:66:60:10:bd:
bf:7d:bc:71:e7:18:09:62:0d:a3:84:54:f9:cc:27:
33:6a:79:19:6d:f8:63:5d:77:ad:79:87:5c:ad:b6:
f7:9a:03:3d:86:5e:47:1c:f5:ce:9b:9d:47:fa:74:
95:de:4e:dc:cd:70:4f:ab:cd:cf:af:71:2c:ee:cd:
8b:07:ac:38:fc:8e:25:3d:2f:3c:ec:6a:d4:19:e2:
52:17:59:02:87:f1:34:e1:db:82:cf:d5:a2:52:ed:
ed:0d:91:df:e7:a9:a7:1d:51:22:a4:02:2e:65:e1:
26:cc:28:15:a0:2f:cb:78:65:d9:2d:7b:8a:47:52:
91:84:3a:07:75:3c:72:03:5a:8e:de:5d:39:37:1a:
97:5b:1a:15:87:1f:b2:5d:02:96:f9:89:e5:28:94:
37:90:8c:1d:25:2e:31:a0:f9:1e:e2:34:67:25:33:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:F5:1A:9C:BF:80:F3:C4:EE:61:44:BC:79:55:DF:44:54:0E:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:18:0b:a8:f7:d2:8f:07:d7:3c:ac:f0:2a:39:42:69:2a:1a:
b4:ae:98:1d:ba:75:82:e4:65:5d:c4:5e:c3:8a:17:bd:7e:81:
5a:a8:11:5d:82:0d:79:1f:fd:29:15:3d:0b:c1:a5:a6:fb:de:
41:56:94:43:21:20:fe:52:37:23:6e:57:b2:d7:43:f1:68:67:
73:d9:ef:aa:e9:22:3a:d5:41:48:e9:9d:72:e6:b1:a8:5c:89:
ba:12:a3:3b:cc:3a:78:cb:07:55:7b:4e:1d:de:2a:d9:6b:37:
52:8b:f6:cc:99:48:6c:ac:06:fd:a6:68:c0:bd:09:e6:6b:91:
28:28:c9:f8:95:7e:59:e9:89:aa:07:a9:66:08:69:4c:a6:02:
d6:79:d1:29:b2:af:cd:aa:22:a4:ff:dd:49:7f:89:45:c4:c6:
49:0f:e7:5d:a9:dc:0e:37:fa:d2:ec:a6:66:dd:e9:9f:76:da:
5e:14:79:0e:54:67:49:4d:9f:19:11:67:cd:03:4d:ff:f2:96:
f8:a9:40:62:6b:ae:51:ca:60:bf:b8:ec:c7:f4:c1:a9:3e:49:
47:64:9f:97:4d:8b:bc:a5:50:c9:9a:3a:32:14:ad:0e:6c:03:
05:0d:ea:eb:50:d2:95:55:31:0e:0e:78:5d:06:96:df:65:8a:
d3:50:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:10 2025 by rpki-client