Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
File: c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa (raw, json)
Hash identifier: B6u8xVUMqL6/H95aI3wmvInylRJ3/OjZEYwgDSYU5Ug=
Subject key identifier: B7:36:1E:93:7D:4A:FF:E0:16:16:A2:52:51:FD:05:93:15:0C:BC:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 481BA8C7DCE2232F57E29E06A42074103094E931
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1b:a8:c7:dc:e2:23:2f:57:e2:9e:06:a4:20:74:10:30:94:e9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=7d8373a8191873aa005935225eab2c6375fd8134d47de2458096442c4a6ec296, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:ea:fc:d7:0a:3b:63:73:b4:b2:12:15:a7:
5b:d3:92:94:a5:3b:4c:c9:e1:17:3d:0b:28:38:81:
f7:92:5d:28:60:6c:eb:63:27:6a:31:10:36:0f:f8:
80:98:a5:ac:ad:72:74:84:24:5f:72:16:dd:44:4e:
26:c0:22:1a:ef:4f:db:77:d8:59:6b:6e:cd:e1:ca:
7d:be:ad:ea:b9:f4:cd:4c:0a:93:a8:30:c3:75:2c:
37:89:30:fb:69:4e:4b:6a:15:61:7d:a0:1e:6c:dc:
11:42:c8:69:13:17:a3:ad:46:ab:44:b9:49:0e:54:
97:86:80:cd:9a:80:1e:3a:bd:b2:02:78:d0:f1:9f:
21:2a:fb:37:6f:88:e6:b8:07:2f:45:6f:b3:3a:a0:
65:58:06:06:b6:35:67:41:61:36:55:17:92:ed:3a:
3d:cd:84:a3:77:61:e8:6d:a0:b8:24:14:2b:e6:1b:
3e:fd:be:2c:a8:6c:58:8c:d4:2f:3c:06:c3:e8:db:
3a:60:e0:65:fb:7d:d2:9d:44:03:93:1d:9a:db:5f:
3b:3e:4e:6e:18:97:3f:d3:19:85:a3:b0:b0:e0:d9:
89:17:df:57:b0:97:04:e0:00:b3:6f:0b:ab:cd:62:
0d:c4:62:54:6c:b7:88:49:b0:30:e0:97:a0:d9:d8:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:1E:93:7D:4A:FF:E0:16:16:A2:52:51:FD:05:93:15:0C:BC:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/20
Signature Algorithm: sha256WithRSAEncryption
70:b8:47:f4:6a:03:a5:c9:a7:01:b5:ba:e8:26:81:a2:5d:24:
2c:83:6e:6a:fb:50:ca:6c:16:b4:13:a9:76:dd:2a:d4:a7:c5:
85:31:d3:4f:e6:aa:53:a5:2f:8f:22:9c:4d:83:bf:2f:3e:65:
a7:5d:20:28:2a:9a:08:8f:6c:2d:54:c5:31:c0:89:d1:ee:0c:
14:f3:e8:75:cf:2d:37:66:6b:fb:58:59:d0:d9:d8:11:d4:63:
b3:c7:3c:51:8a:d0:7e:63:7e:03:30:12:8f:b7:0d:2d:99:73:
5d:1a:6a:b4:f9:04:17:73:d3:d4:6b:98:f5:38:5e:9e:e8:a9:
00:41:16:8a:ee:c1:47:80:e3:3d:ee:ab:d4:49:89:a5:41:08:
d0:2b:0d:8b:c1:6d:dd:9c:6e:c5:01:e3:ab:da:55:1d:46:dc:
33:82:83:7d:63:c6:ac:70:7f:8d:a4:f2:e7:0d:15:7d:bf:5c:
b8:ac:1d:df:61:27:89:b5:07:3e:5c:1f:6e:b7:9d:c9:33:3f:
24:b9:d3:51:6d:a8:3a:1e:00:ec:b7:3a:ed:d5:ee:e6:88:83:
7d:af:81:59:53:fb:ed:01:b5:84:1b:2f:1d:6e:00:b4:12:28:
7e:0a:df:27:54:82:c3:45:57:a2:d1:91:56:24:a8:8f:34:b6:
fc:f5:06:07
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSBuox9ziIy9X4p4GpCB0EDCU6TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjgwMDAwMDBaFw0yNTAzMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkODM3M2E4MTkxODczYWEwMDU5MzUyMjVlYWIyYzYzNzVmZDgxMzRkNDdk
ZTI0NTgwOTY0NDJjNGE2ZWMyOTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIl6vzXCjtjc7SyEhWnW9OSlKU7TMnhFz0LKDiB95JdKGBs62MnajEQNg/4
gJilrK1ydIQkX3IW3UROJsAiGu9P23fYWWtuzeHKfb6t6rn0zUwKk6gww3UsN4kw
+2lOS2oVYX2gHmzcEULIaRMXo61Gq0S5SQ5Ul4aAzZqAHjq9sgJ40PGfISr7N2+I
5rgHL0VvszqgZVgGBrY1Z0FhNlUXku06Pc2Eo3dh6G2guCQUK+YbPv2+LKhsWIzU
LzwGw+jbOmDgZft90p1EA5MdmttfOz5ObhiXP9MZhaOwsODZiRffV7CXBOAAs28L
q81iDcRiVGy3iEmwMOCXoNnY5wsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS3Nh6T
fUr/4BYWolJR/QWTFQy8czAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzJjZDRkZGYtOWEzOC00MjVhLTgwMjEtYzQ1ZWQ5NmM1MGVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLAigDAN
BgkqhkiG9w0BAQsFAAOCAQEAcLhH9GoDpcmnAbW66CaBol0kLINuavtQymwWtBOp
dt0q1KfFhTHTT+aqU6UvjyKcTYO/Lz5lp10gKCqaCI9sLVTFMcCJ0e4MFPPodc8t
N2Zr+1hZ0NnYEdRjs8c8UYrQfmN+AzASj7cNLZlzXRpqtPkEF3PT1GuY9Thenuip
AEEWiu7BR4DjPe6r1EmJpUEI0CsNi8Ft3ZxuxQHjq9pVHUbcM4KDfWPGrHB/jaTy
5w0Vfb9cuKwd32EnibUHPlwfbredyTM/JLnTUW2oOh4A7Lc67dXu5oiDfa+BWVP7
7QG1hBsvHW4AtBIofgrfJ1SCw0VXotGRViSojzS2/PUGBw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:03 2025 by rpki-client