Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
File: c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa (raw, json)
Hash identifier: yR7DJDZfWRBCQmaT9pNHRA1DQwwzeA7Q9r+rBQrsgbc=
Subject key identifier: A3:56:1B:B3:C8:1D:F3:AC:FB:3F:63:93:6C:ED:3B:89:E4:21:28:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3DE3B82F4D6E4CD3D6D1167915AED48F14EE14EC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e3:b8:2f:4d:6e:4c:d3:d6:d1:16:79:15:ae:d4:8f:14:ee:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=c92681cf09674c63c79635ba12067b8d18ca398eae2a2923fc124e7151530d5c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:00:37:3f:38:9f:9c:17:96:3e:cf:29:5c:
c1:11:27:2b:8f:82:05:7b:3d:7f:86:64:2d:83:f9:
b2:f3:a8:63:15:4c:58:33:c1:64:41:db:e0:32:b7:
b2:ef:65:54:ef:ac:e9:d9:f2:06:8f:02:b9:4b:2c:
93:07:78:68:ed:3a:de:c6:d3:37:24:2e:9a:a5:0c:
d5:66:c9:88:44:05:5c:d3:19:72:e0:18:ce:f5:96:
bf:85:fa:6a:d6:d6:60:c8:90:f3:09:19:74:a3:38:
88:cf:3a:c8:c6:08:de:99:85:dd:2d:f5:4d:19:02:
77:c0:64:15:6a:46:93:cc:5e:21:10:c9:3c:c2:42:
3c:fc:c4:1e:20:c0:df:18:26:ab:7c:22:25:2d:e6:
21:1d:cf:24:d9:ea:e5:3c:57:c8:c2:a6:8c:ef:4a:
5e:2a:f7:e1:19:ad:fd:27:00:e9:31:20:a2:48:55:
12:4f:e4:eb:1e:4f:26:41:4f:28:bd:34:26:63:86:
bd:68:5f:d0:ea:24:6e:f6:c8:78:7b:e3:bd:09:0d:
9a:eb:32:d9:ee:6e:fe:fd:f8:84:58:96:53:72:ce:
c4:6f:73:2f:8c:11:a0:b8:82:09:d9:37:b4:55:46:
10:10:49:a9:ed:86:5b:fb:a6:70:ea:48:24:35:cb:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:1B:B3:C8:1D:F3:AC:FB:3F:63:93:6C:ED:3B:89:E4:21:28:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.32.0/19
Signature Algorithm: sha256WithRSAEncryption
63:fe:81:6d:dc:5d:71:88:7e:ad:2d:bf:21:cb:be:33:65:0f:
b6:c1:5b:af:81:91:6d:6b:43:41:3e:65:28:52:dd:28:42:f5:
21:c6:15:54:83:91:54:09:6b:72:6f:b2:51:4e:d9:5c:05:77:
50:c4:0c:64:aa:67:b9:b0:fc:c9:8e:1a:2c:f1:c5:6a:51:50:
7a:ae:cb:bd:2d:a4:ee:33:d8:ca:30:08:ed:cb:7f:a6:2e:f1:
99:47:67:25:b1:4d:0f:69:78:2a:36:5a:06:5f:15:a8:05:5c:
c9:0b:dd:da:c6:4d:0f:ec:3c:2a:cc:99:d3:40:53:26:2e:5f:
09:b9:4e:bc:71:85:3a:c8:fe:d2:20:b8:2a:4e:06:d9:c2:76:
c6:f7:5d:a9:a1:ba:5c:0e:a3:8e:b9:29:98:63:e0:18:70:f6:
d1:bf:29:ff:81:16:0b:00:1d:c2:c3:73:64:1d:3c:1d:8b:78:
9e:d0:be:42:a0:b7:2c:58:06:f6:35:be:92:1a:57:46:8c:2a:
31:31:de:d2:de:e7:c8:89:c9:5e:f0:30:c5:b9:9d:ca:99:78:
7a:b0:1d:43:16:88:7d:56:ad:61:52:d7:03:2f:63:4e:59:3a:
d4:58:28:10:bf:65:23:09:41:19:37:6a:c8:e1:ff:d2:0e:33:
45:bd:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:38 2025 by rpki-client