Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier: sQVp0ezG5bxewhesqfSLyCMG+ga9NYLHPb3M4/USYUk=
Subject key identifier: 21:AC:AC:3E:04:59:48:A0:80:6D:B3:67:85:10:C3:CB:A4:3C:58:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FEB8AEEBB2B3E4C1ADED625EB286CFC27044DFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:eb:8a:ee:bb:2b:3e:4c:1a:de:d6:25:eb:28:6c:fc:27:04:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=1d38758000cfaa813dc9718d2709e5fa6d9a523a9705684afc3cc71449655e0f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3b:45:72:ac:e9:05:bc:65:db:60:89:32:96:
71:1d:84:8a:2c:dc:85:29:e9:46:a4:ab:33:38:87:
1c:e8:bf:89:61:81:69:09:c7:89:06:00:47:ec:e6:
57:0c:49:a9:3d:b4:6b:f2:54:fc:ea:1a:1f:ef:4e:
f9:ca:fc:57:40:72:39:48:52:8a:ce:9f:07:91:46:
29:6b:4f:c5:88:4e:71:03:5b:14:95:f1:9f:ac:0f:
36:8b:db:ba:27:f1:eb:36:06:d3:79:94:ec:41:70:
f5:82:f1:51:12:f5:a3:14:d9:18:9d:31:b5:92:cc:
82:77:8a:eb:e3:ee:93:5a:46:54:ad:8f:dd:97:b6:
d0:01:9b:45:ef:88:1d:ec:f9:8d:56:80:8a:8c:57:
f0:a6:f9:c3:3f:6a:cc:45:38:8d:56:a7:44:da:0c:
6d:1a:84:66:b1:5e:bf:e4:7a:96:f6:be:e0:3c:45:
da:a3:36:47:bc:4b:18:aa:1c:1a:f1:76:9d:59:fe:
75:cd:04:c8:35:73:e5:08:6f:c5:22:54:10:29:c8:
76:fd:2c:4d:bd:76:4f:c6:27:f4:ae:6a:6b:4d:32:
61:1b:28:9e:08:c5:c9:85:2e:68:4e:92:93:e7:cb:
7d:9c:39:4f:da:90:1f:26:16:48:bb:dd:97:e0:d6:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AC:AC:3E:04:59:48:A0:80:6D:B3:67:85:10:C3:CB:A4:3C:58:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:9d:6b:fe:99:f3:1a:4a:ec:e2:64:2b:08:7e:89:65:35:6e:
6f:45:ff:ee:8c:18:0b:26:42:27:00:e5:2a:33:2f:e9:81:01:
34:a0:74:0f:97:26:b7:21:14:27:e3:c4:e3:e5:a8:d0:22:73:
0f:7d:5b:81:7c:85:bd:1a:da:11:da:89:c8:68:da:36:58:fb:
2e:b7:7b:bd:64:2c:06:dc:46:8d:15:f9:2b:5b:e5:f0:27:55:
d7:57:ba:31:88:20:c8:09:e3:81:36:2c:1f:56:7d:8e:c3:a8:
00:01:07:c9:41:2d:0d:c4:a7:29:15:b5:87:f6:a6:c4:ed:92:
12:f7:29:94:24:08:a5:77:e1:97:99:cf:f8:05:5a:71:70:83:
29:1c:1e:a4:1d:fa:90:9c:ad:e4:4b:b7:85:03:d4:55:21:71:
03:eb:b2:45:05:14:91:1e:c4:34:e0:30:6c:8e:97:a9:12:02:
3b:49:15:58:a9:70:68:da:63:18:b3:8f:f1:60:32:cc:40:a6:
62:68:ea:77:45:db:ac:e1:6e:35:f2:e0:a1:bc:e4:32:95:fc:
94:dc:21:aa:e1:d1:5b:2a:79:1b:3e:e6:d4:b2:27:fa:e5:f7:
4b:03:0d:38:9c:67:03:1b:4d:f7:4d:13:47:8a:ac:8e:48:e1:
98:b0:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:39 2025 by rpki-client