Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
File: b176a187-5863-4413-a001-74ccc0321be5.roa (raw, json)
Hash identifier: Ws16iqzthhmcbtd2okrnw+r9wjyigbTObJGZao0eit0=
Subject key identifier: 94:71:8C:09:15:8F:50:40:31:49:30:B9:10:04:66:16:A8:AB:FC:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C92D38B80D9DF2C02B4BB4753004F0594589E5F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02c::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:92:d3:8b:80:d9:df:2c:02:b4:bb:47:53:00:4f:05:94:58:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f6985ec8df89feee732a5162c01edaad6b3a9fe2c9b6959c413720cd0b1ab75d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:d5:42:3c:dd:d5:8e:38:bc:d2:eb:bb:f9:
cf:6b:30:8b:2f:9d:29:2a:53:dd:85:ad:15:2c:d1:
f3:48:d4:98:7e:d3:6f:43:66:48:b2:d8:1d:05:bb:
75:08:07:e4:dd:de:7d:f0:b0:5c:63:d6:8f:45:e7:
4f:d8:0b:dd:46:9c:9f:44:d4:e0:f3:f8:98:36:c0:
c0:3d:b2:40:c6:64:b8:39:30:24:28:fb:ee:d7:af:
09:30:92:79:dc:38:23:04:53:7c:bc:bd:eb:fd:c2:
4b:50:6c:ff:cf:7f:7d:8c:2a:b1:74:1c:88:4f:49:
2f:88:33:fe:e0:5b:07:4b:c5:53:4c:51:a2:e3:4d:
30:49:5b:8d:98:87:e6:df:53:61:53:cd:73:a2:6d:
10:ec:cb:fe:20:79:37:b7:d2:6a:f3:7b:d0:8a:ce:
94:af:e1:b6:f7:a8:32:61:48:5b:a9:6a:25:1a:84:
28:cd:f9:4a:c8:f2:d7:95:52:49:65:a5:36:6f:d7:
34:1e:a2:fb:03:13:03:8b:7b:c0:7c:b2:84:c8:ff:
d8:23:88:ca:c1:cf:c8:a0:d9:30:d9:b6:2a:12:ec:
87:d3:ca:a0:34:3f:53:f2:de:be:ea:be:53:2a:81:
d1:6d:2a:6b:82:c5:c0:8f:56:77:41:5b:37:23:bf:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:8C:09:15:8F:50:40:31:49:30:B9:10:04:66:16:A8:AB:FC:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02c::/36
Signature Algorithm: sha256WithRSAEncryption
b1:c3:e7:13:70:b1:b0:fc:73:9e:9e:43:09:03:ac:60:ba:ea:
f6:88:41:26:70:e7:3e:9b:18:b4:ad:c6:23:57:b4:36:25:7b:
43:58:c2:9d:96:ec:2d:04:a6:69:02:ed:10:32:d8:e4:32:6d:
1d:ad:df:6b:ab:30:22:d8:9a:16:e4:52:78:2d:43:83:50:d1:
39:68:e2:4d:ec:2c:4b:9f:fc:e1:d2:a4:dc:a1:5e:e9:b6:3f:
b2:69:13:d0:19:e1:81:8f:f8:f1:ac:7b:52:c4:cf:32:2f:25:
e1:62:af:b7:0f:d9:05:32:e4:54:08:8a:dd:32:22:8c:95:8e:
c0:2f:94:8f:39:e4:a2:3c:5d:b9:60:4a:59:41:cb:46:c3:ce:
48:b2:18:29:4f:ee:76:25:65:8e:81:ba:57:0c:0d:f9:01:56:
18:43:af:9f:98:af:6f:d7:4b:43:18:0c:61:01:f2:c8:41:bc:
3e:ec:49:ee:9c:97:73:6c:b9:a3:d1:b1:07:a8:7f:9c:9b:63:
6f:c4:49:bf:a2:03:5c:4b:20:a4:f7:a0:ad:ff:ed:44:42:cc:
31:77:2e:62:9a:38:af:fc:04:5d:0c:ea:37:d5:07:f0:f5:43:
61:49:1a:d2:69:14:a8:9e:21:a5:95:05:55:19:1b:da:95:e8:
88:a6:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:23 2025 by rpki-client