Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5744d03-14d6-49dd-bcc7-bbf41846c647.roa
File: e5744d03-14d6-49dd-bcc7-bbf41846c647.roa (raw, json)
Hash identifier: 43SrBRwoYPUPbxysyOkcSd7yIwf/gO/MlLgtreQjZHI=
Subject key identifier: 12:C9:ED:9D:B7:B8:83:D7:DC:B8:D4:78:59:14:96:B0:5C:CB:2E:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78AD017293DA9ACD4588079616E26C67593054E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5744d03-14d6-49dd-bcc7-bbf41846c647.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ad:01:72:93:da:9a:cd:45:88:07:96:16:e2:6c:67:59:30:54:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=ed22b84ccff5cd567b4645662bd98e6743e99710e11e7cce87336b1ccb23e9b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:23:e8:4e:5f:6d:f8:f6:0e:c9:6d:79:f6:
05:0e:85:bc:80:94:49:86:ab:28:b4:95:78:7e:cb:
90:53:c5:52:d1:42:e8:68:2b:5c:4e:f2:1c:8d:e2:
b8:40:1a:99:4a:34:53:66:ec:18:a5:cb:0d:6f:c0:
98:dd:00:f3:22:48:61:bd:8e:0e:36:d6:10:27:39:
53:ff:c0:11:6d:08:1b:aa:23:70:12:39:8f:71:f9:
7b:d3:13:9d:02:c2:f3:cd:df:3a:d3:05:3b:a3:5e:
db:c2:2e:ff:86:30:f1:d2:2b:2e:a7:2e:9e:b8:b7:
c0:68:e9:26:5b:40:dc:83:47:49:ad:75:0b:aa:31:
d9:d7:77:28:96:b0:d4:cb:aa:26:0f:36:27:6b:d5:
47:10:ae:bb:ff:5e:7c:6c:e2:c6:83:40:c8:25:29:
e6:d5:23:d6:f1:82:4c:e2:ca:cc:91:de:34:ce:5c:
8c:26:7f:28:c7:86:85:2d:49:73:0d:5a:9d:cb:06:
ae:86:17:51:be:91:b0:9b:2c:f4:d5:09:99:04:13:
4b:a7:68:62:52:94:48:47:fb:be:2b:62:9f:27:5d:
c7:54:dc:c0:d9:81:78:32:da:35:57:4a:43:3a:ee:
6a:7e:fb:ab:be:9f:41:2a:f8:11:7b:e3:ce:e0:00:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:ED:9D:B7:B8:83:D7:DC:B8:D4:78:59:14:96:B0:5C:CB:2E:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5744d03-14d6-49dd-bcc7-bbf41846c647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.126.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a1:4f:a4:fe:ca:88:09:a9:7e:90:8b:d8:03:52:eb:e7:53:
4f:99:27:fe:02:8e:9d:ef:ec:e4:1c:67:62:c0:13:9b:f7:f3:
10:df:5d:1f:ab:bc:67:a7:2a:68:03:7b:83:05:33:16:23:11:
6f:9a:bc:68:f5:4d:14:b2:e6:40:1c:68:98:ba:22:70:d4:11:
44:91:ec:1e:ef:03:e6:0a:fe:e8:2e:51:a8:d5:e8:22:5a:99:
fb:b5:d4:83:ed:e7:89:48:67:2d:61:6b:88:d5:29:92:3c:7c:
d7:bb:49:54:c0:11:bd:0f:88:65:9a:8b:7f:96:e0:86:ea:4a:
49:c8:08:6b:32:8f:c6:93:4f:85:13:25:b7:92:1b:48:65:ac:
b8:a1:d9:6b:22:89:7f:e7:6d:3e:bd:f8:a1:aa:55:f6:29:f1:
7c:64:2e:6f:15:23:ca:92:0c:92:a8:49:bc:50:83:be:02:58:
a0:e9:03:20:6a:b6:32:56:94:45:eb:ee:ff:53:88:bf:8a:31:
43:69:08:b7:82:d2:8d:ae:17:93:39:f6:4f:47:c7:86:d1:e2:
17:49:40:63:4e:9c:65:8e:9b:16:c2:5a:e1:59:00:7a:57:8f:
72:4c:3a:4b:56:cf:18:ec:d9:b1:8d:4f:86:8f:ff:8f:d3:99:
30:2b:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:32 2025 by rpki-client