Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
File: aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa (raw, json)
Hash identifier: QanVENKFW3UykuadEtrcRvqW7JFV3eLqT1ND1Q5CqTI=
Subject key identifier: 81:69:12:58:BC:7E:76:70:EE:04:FC:1F:47:FA:76:FD:46:90:EE:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DAEB76F39A34B679A426539D07FD493E00BB2A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ae:b7:6f:39:a3:4b:67:9a:42:65:39:d0:7f:d4:93:e0:0b:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=a4ffcaf81c081841892b649f22da84f52ee994fe53639c73a4b86fd1540c6db3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:02:75:8f:7d:1b:80:78:4f:1f:c6:e6:c6:
35:97:a1:bf:00:40:67:52:8c:44:1b:b0:26:8e:e7:
c4:31:ce:d6:97:80:dc:df:20:69:01:91:61:7a:f5:
96:f8:c1:78:61:24:85:ec:ad:3e:a7:7e:58:1a:5d:
72:24:cf:21:22:a3:be:f1:a1:92:10:72:0b:94:67:
af:86:a0:5c:55:78:24:1e:c6:91:49:16:f4:e9:16:
7b:53:70:4b:90:ed:f6:c0:f3:28:c8:06:59:f0:d2:
13:48:15:dc:3b:7e:81:b7:5d:fc:9f:18:61:ce:e8:
76:af:58:74:e6:0b:ed:a2:8e:c9:38:8f:77:6f:c7:
85:9e:0d:53:09:c6:81:93:a5:ce:e4:3c:a9:7e:ed:
fe:e6:3d:e3:76:df:17:7f:fc:b3:e2:51:ab:f9:88:
3f:0e:7b:9f:51:fa:8d:76:32:56:bb:f5:6b:d8:64:
8f:ab:2a:ee:01:d5:8d:5d:f0:18:5c:ed:86:ad:56:
c0:cf:db:06:37:29:61:95:41:c9:7e:3c:fa:22:bd:
a7:2a:d6:9c:2d:73:14:a3:82:a7:b4:e4:26:0f:33:
49:a9:b5:16:83:53:3a:21:1b:36:cf:70:cc:f3:f5:
b6:6e:8d:f7:4f:f2:0a:47:36:b6:28:e8:60:dd:6f:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:12:58:BC:7E:76:70:EE:04:FC:1F:47:FA:76:FD:46:90:EE:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.144.0/20
Signature Algorithm: sha256WithRSAEncryption
03:6e:84:20:3c:17:39:57:84:55:4a:8a:dc:78:0c:f7:18:56:
91:48:6e:5d:8f:f4:fb:7a:b9:b5:94:7f:19:7c:05:76:ab:95:
6c:36:a7:21:0f:b1:24:5c:75:b3:e9:7d:b2:a5:35:3d:c8:b9:
30:fa:78:a6:a3:79:2f:e1:3c:b9:fe:02:dc:b7:7a:78:63:7b:
6c:cd:98:f8:9d:97:d8:71:09:71:ce:d5:32:48:ad:52:31:53:
03:0e:3d:80:e7:2c:b0:41:3b:21:b6:90:26:f6:70:0a:b5:0e:
7e:9b:9f:21:44:ff:32:f8:e2:d1:e7:87:f0:9d:82:7a:c2:5f:
90:18:8f:eb:3b:e9:d7:f7:fe:7b:a3:ab:7c:e9:73:17:49:e0:
c5:26:e5:84:f3:29:16:de:be:ea:01:bd:c1:d5:15:96:ca:a1:
e8:8d:76:a1:ad:25:a0:f7:18:62:83:a1:e6:e2:c9:72:9a:60:
76:01:93:f3:e9:e7:28:82:b6:91:12:41:59:c8:bd:b0:9e:03:
b7:de:4e:f2:ba:07:51:bc:17:25:2b:d8:f8:18:c2:13:77:63:
ca:b9:44:1d:7f:a8:a4:27:25:7b:c8:0a:72:6f:84:04:4c:95:
ba:51:83:84:a4:83:e1:15:c3:43:67:f6:77:fd:46:88:fd:dc:
8b:05:76:22
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUba63bzmjS2eaQmU50H/Uk+ALsqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjgwMDAwMDBaFw0yNTAzMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQGE0ZmZjYWY4MWMwODE4NDE4OTJiNjQ5ZjIyZGE4NGY1MmVlOTk0ZmU1MzYz
OWM3M2E0Yjg2ZmQxNTQwYzZkYjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKgbAnWPfRuAeE8fxubGNZehvwBAZ1KMRBuwJo7nxDHO1peA3N8gaQGRYXr1
lvjBeGEkheytPqd+WBpdciTPISKjvvGhkhByC5Rnr4agXFV4JB7GkUkW9OkWe1Nw
S5Dt9sDzKMgGWfDSE0gV3Dt+gbdd/J8YYc7odq9YdOYL7aKOyTiPd2/HhZ4NUwnG
gZOlzuQ8qX7t/uY943bfF3/8s+JRq/mIPw57n1H6jXYyVrv1a9hkj6sq7gHVjV3w
GFzthq1WwM/bBjcpYZVByX48+iK9pyrWnC1zFKOCp7TkJg8zSam1FoNTOiEbNs9w
zPP1tm6N90/yCkc2tijoYN1vvucCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSBaRJY
vH52cO4E/B9H+nb9RpDuyzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWE3OWJiMTgtYjc0ZC00Y2MzLWJhMDUtMjBhZjBmOTQzNWIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLAikDAN
BgkqhkiG9w0BAQsFAAOCAQEAA26EIDwXOVeEVUqK3HgM9xhWkUhuXY/0+3q5tZR/
GXwFdquVbDanIQ+xJFx1s+l9sqU1Pci5MPp4pqN5L+E8uf4C3Ld6eGN7bM2Y+J2X
2HEJcc7VMkitUjFTAw49gOcssEE7IbaQJvZwCrUOfpufIUT/Mvji0eeH8J2CesJf
kBiP6zvp1/f+e6OrfOlzF0ngxSblhPMpFt6+6gG9wdUVlsqh6I12oa0loPcYYoOh
5uLJcppgdgGT8+nnKIK2kRJBWci9sJ4Dt95O8roHUbwXJSvY+BjCE3djyrlEHX+o
pCcle8gKcm+EBEyVulGDhKSD4RXDQ2f2d/1GiP3ciwV2Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:30 2025 by rpki-client