Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e00516db-a674-4a02-8de9-e0ad569ecc6f.roa
File: e00516db-a674-4a02-8de9-e0ad569ecc6f.roa (raw, json)
Hash identifier: eMDBQkloodH/cfo8Vfj/nv+R1vD2M1g9JNfk/x7muEc=
Subject key identifier: B0:70:45:B3:57:25:52:CE:2B:43:B5:4C:D6:17:AB:01:2F:B3:F4:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 322299BB936AE1BCA2101ED54F4D78EF2B2A4A06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e00516db-a674-4a02-8de9-e0ad569ecc6f.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:22:99:bb:93:6a:e1:bc:a2:10:1e:d5:4f:4d:78:ef:2b:2a:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=667aea65a9f1d001fbcac9b03b6b5343f1ff1b3f0e4b008693dcf5b2df2f8c86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:4d:5f:94:d0:70:45:d9:05:d3:ad:1d:a8:
9d:99:b9:75:63:46:f1:91:51:89:23:5f:3b:80:f4:
df:1a:37:5d:c2:8f:92:95:02:03:16:98:99:c7:95:
e0:48:12:02:db:7e:c7:d2:94:46:a5:68:ba:24:50:
54:ab:c7:b0:08:94:84:e0:bd:4d:cf:93:f2:76:c0:
c3:0e:04:19:2b:52:59:d2:1a:cf:17:df:80:fd:4e:
e1:34:cb:69:b2:bc:6b:30:c3:d5:e5:7d:d9:27:5d:
b0:6f:3b:48:71:37:23:be:92:d3:a4:2d:07:25:67:
ab:8b:29:c8:dd:27:7f:5a:46:52:8a:d6:41:ed:d4:
04:bc:90:de:0b:57:b7:84:ef:81:31:07:c1:02:7c:
0a:01:e4:87:bb:bf:68:c6:a8:0e:20:64:c8:03:ab:
45:b9:ac:20:27:5f:6a:3e:f7:8c:5f:61:85:f7:ae:
eb:b2:38:5d:dd:7e:cc:d0:31:77:29:71:5e:bb:f4:
64:0e:fa:66:cd:33:bb:c4:dd:9c:f1:16:d7:79:5b:
5c:12:02:c6:45:05:01:59:d8:59:83:2a:08:f7:3d:
05:3a:6d:27:c4:e7:d9:7c:96:2a:28:b7:29:b3:a5:
5d:00:70:88:68:ec:25:2e:fa:58:ab:05:e0:12:cd:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:45:B3:57:25:52:CE:2B:43:B5:4C:D6:17:AB:01:2F:B3:F4:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e00516db-a674-4a02-8de9-e0ad569ecc6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.176.0/20
Signature Algorithm: sha256WithRSAEncryption
45:41:3c:8a:1c:48:44:ac:90:3c:ca:b1:41:4b:4f:37:cf:e6:
0e:b3:71:b4:e9:e8:2f:21:e4:f8:21:27:59:ca:c0:20:74:eb:
dd:6f:ff:ba:1a:d0:d5:9f:29:b9:c7:70:a8:42:85:ed:08:c2:
78:85:c8:d2:69:1d:69:e3:21:d3:08:54:a9:67:ed:9d:a7:48:
bb:48:55:a1:09:56:54:92:f2:1d:16:fe:cd:b5:ee:6d:f2:d1:
22:da:f8:74:40:0f:9a:89:07:ff:97:49:4c:e2:8a:7c:d1:f8:
eb:19:7c:79:69:b5:6d:ea:44:34:3d:b7:c1:49:9d:b3:8a:44:
48:8f:f0:0e:15:e7:02:ad:99:f5:98:a6:72:a4:ac:19:2e:00:
e6:4e:85:bf:62:75:17:84:85:8d:2a:a5:4b:30:3f:b2:46:32:
c1:a8:a5:74:53:7d:cf:cd:97:da:9a:f3:57:ec:29:24:c5:19:
9a:0d:90:ef:3b:aa:da:bd:49:6f:2b:04:2c:98:59:15:da:0c:
04:9e:55:c5:e0:73:29:cb:c5:26:eb:c3:36:67:4b:15:bd:85:
ee:e5:28:4b:5a:ed:b0:98:7b:cc:d4:fd:24:a3:22:82:e0:32:
48:01:b7:03:07:06:4c:6d:86:12:1c:a7:a0:be:3d:ff:08:02:
65:1b:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:03 2025 by rpki-client