Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
File: ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa (raw, json)
Hash identifier: q1p9Hnrb8luswvA6iDdId7LwaRKaqeDRzf8zffTyyc4=
Subject key identifier: 18:D8:3B:0C:DA:97:B0:36:39:1D:FC:65:EF:62:BA:5E:C0:C1:04:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09A213A7CF203F2795D1219836AC5D478EE52D4F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a2:13:a7:cf:20:3f:27:95:d1:21:98:36:ac:5d:47:8e:e5:2d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=4054bd754a6b69d87185d15e25b665b6f05e56fe85ba50eead517558c492ca78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0f:54:aa:bc:26:2f:f2:ee:a6:58:8f:42:c7:
51:2f:1a:0c:60:f7:25:6e:35:ba:43:42:08:53:27:
72:4d:fc:1b:50:76:45:72:cc:1a:16:3a:99:da:cf:
32:8d:26:b5:4b:dc:16:fa:de:90:32:fe:80:94:a2:
e2:ec:8f:a8:ad:0a:1d:af:70:af:e6:1e:50:c4:6d:
3a:c0:23:d4:a3:08:e3:f4:25:37:33:45:c6:5a:ce:
a0:25:86:43:3d:df:68:22:73:21:0d:a3:9a:5f:59:
cb:68:45:66:7c:08:0f:c5:df:43:4b:4e:59:69:cd:
84:84:a0:ae:c4:8d:c8:3f:a7:6e:35:0a:1d:cf:80:
5d:46:bd:64:0b:3a:33:0f:a4:d1:c6:a8:76:e4:09:
df:7d:8b:e4:b9:73:fe:16:f6:cb:da:09:8f:eb:33:
58:73:05:68:1b:a3:5b:3f:16:c1:45:6d:51:22:b0:
ae:0f:f0:8b:ab:89:19:a8:28:42:73:55:5e:eb:00:
da:71:90:9d:5e:c0:85:8c:2f:4d:06:fc:35:0c:84:
8f:b6:83:83:ac:ef:d6:05:38:73:51:5a:e4:a7:45:
5a:43:7f:c6:c2:f5:39:76:bf:cb:e9:f8:36:61:e6:
3c:f1:6d:3d:60:d5:1f:33:87:e7:96:ba:73:07:b3:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:3B:0C:DA:97:B0:36:39:1D:FC:65:EF:62:BA:5E:C0:C1:04:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:62:59:78:81:24:91:d2:f1:57:a1:bd:bf:a2:2b:c0:95:22:
84:c6:be:2f:45:e0:28:b6:8f:a9:22:cf:e5:75:c9:70:21:b2:
10:24:1a:bd:08:37:36:8b:65:b4:26:a0:e7:8b:e2:fc:30:92:
a2:00:79:95:f0:65:3d:a5:6a:8d:b2:e3:5c:2a:aa:53:42:4e:
5c:d9:bc:1e:09:7f:6e:77:59:fd:aa:0a:e0:e1:0e:31:be:73:
0e:af:4e:b6:09:1b:01:c3:fa:9d:61:5e:2c:89:d0:97:76:fa:
b4:01:94:0d:5b:b2:ed:00:7d:dc:42:85:20:03:a2:39:68:3f:
5f:cc:36:de:f4:a4:ba:df:77:02:8a:65:6c:df:1a:48:49:6b:
36:d2:fa:7c:43:bb:89:09:29:f1:f1:8a:11:44:bb:4c:33:60:
76:64:86:2f:38:c6:65:12:6f:e2:a6:d2:10:1f:1e:08:f9:4b:
95:12:01:d1:41:46:2e:59:7c:f7:a2:86:4f:84:f8:f7:58:97:
d6:ef:1e:8a:cd:d4:7f:3d:82:c6:7c:30:45:af:db:dc:3d:5a:
6e:25:33:3e:db:98:1d:66:ad:7b:85:2f:cb:62:c5:56:db:c3:
fb:74:c5:b9:c3:5a:54:0a:a1:24:3e:01:2f:13:9e:a4:f3:61:
26:77:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:56 2025 by rpki-client