Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
File: ea9f1f24-552b-49dd-a167-4872d5575c1d.roa (raw, json)
Hash identifier: STIEciiZY4HPEq2lTxgFbH0pta+3sZgC5r/kBN5KhIw=
Subject key identifier: AC:AE:74:BF:9A:13:EF:4C:06:49:23:9C:2E:15:78:8F:CF:52:22:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08E917A3D2D87FF822362C0F23049028516E3155
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e9:17:a3:d2:d8:7f:f8:22:36:2c:0f:23:04:90:28:51:6e:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ceabe488242acaa5ba35cbb1e435a32e42707d088bf3a5ca89d1bdf7e9e49142, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:0a:61:a0:e9:5f:5c:29:39:09:22:9b:87:
2d:f3:db:62:6c:b8:ad:d7:a1:f8:34:31:c8:5b:fd:
de:e4:d1:e4:ba:30:64:81:d7:1e:5c:2b:ca:a0:96:
e2:b1:b5:85:d7:c8:73:7f:18:b5:0d:a5:2a:9e:3b:
85:d5:c6:52:79:e6:37:66:e8:78:db:d9:74:25:4c:
e0:47:8a:7f:ad:69:6f:2b:30:3c:cb:e3:43:ed:e1:
16:53:79:21:c1:95:43:d0:6c:00:c1:10:bd:1d:fa:
75:d8:7a:2d:5e:ba:11:c4:83:7d:ed:c2:54:78:08:
96:27:27:77:9c:12:ad:1c:c1:b5:84:95:60:b7:22:
a8:d8:d8:59:e8:e0:cb:95:1c:d6:d1:f0:2c:e6:ff:
85:cb:71:24:75:e2:2f:c3:21:9e:99:37:7c:6f:c6:
62:8a:ca:6d:de:be:b7:9b:aa:69:56:89:f6:23:a2:
d6:c8:4a:3e:9d:d7:dc:25:76:ad:ac:06:c1:1b:84:
13:92:69:9e:05:93:69:85:58:a2:c3:1c:ac:8f:85:
2d:1b:f0:a4:23:ef:e5:7c:e3:55:ab:c1:7b:a9:c3:
9f:ba:eb:70:20:70:73:3c:03:4c:1f:cb:88:98:1f:
aa:9f:87:07:85:ff:f5:e1:a1:e9:c7:0f:cc:2b:79:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AE:74:BF:9A:13:EF:4C:06:49:23:9C:2E:15:78:8F:CF:52:22:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.120.0/22
Signature Algorithm: sha256WithRSAEncryption
91:77:69:33:be:19:ee:8a:f8:7c:52:69:4b:67:d3:22:c2:1c:
42:d9:d5:fc:02:5c:88:54:51:cf:ef:7c:21:0e:21:5e:16:6c:
23:31:fa:d0:f6:35:89:b4:27:fd:a9:17:c4:20:94:82:b6:f9:
f3:51:a1:de:d3:1f:fc:c5:72:14:52:0b:48:ee:06:e2:ec:7d:
14:b0:c6:17:98:2a:28:4e:f5:68:df:cb:95:62:fa:34:0d:20:
35:bd:06:9c:b2:b2:e5:94:24:2e:b7:95:d9:c9:f1:b2:08:8b:
c8:7c:65:a4:23:2e:34:61:c8:6e:d4:dd:e6:04:b5:e0:96:a8:
0c:ea:be:f8:c3:67:23:a0:ba:93:a0:4d:55:a2:54:ba:0b:d2:
bd:ea:3b:c7:ff:0f:13:ee:38:2d:be:f1:08:65:58:ec:e8:7e:
25:8d:75:46:25:4d:c3:55:9e:04:a9:e7:f5:f6:c0:54:73:d8:
b3:db:d0:cc:c7:e5:53:48:d6:70:1d:24:47:9e:c3:a2:cb:4d:
bb:e9:96:ce:25:3d:d3:16:c3:aa:7a:66:de:ae:a5:76:00:44:
6e:52:ab:34:34:3a:38:39:a8:d3:4c:d0:0c:1b:37:e1:4e:83:
b9:1b:ee:44:12:04:2e:b7:19:0a:cc:8e:77:1c:8c:9f:b4:69:
7b:83:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:57 2025 by rpki-client