Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
File: ec7e5637-f312-4c51-b644-29324b74734e.roa (raw, json)
Hash identifier: 2WnTmvtqZDWjKBB0FKVUCNMgB6gClR0351sQStq/raA=
Subject key identifier: 95:C7:A8:26:8D:E2:2C:04:F9:A4:C2:94:4B:30:00:0E:FB:81:AC:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59D6AF854F9BCC63307D9BCFB6410532C310D072
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:af:85:4f:9b:cc:63:30:7d:9b:cf:b6:41:05:32:c3:10:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=c5869dc4285ee6136b3baf6503f4ffc289f08e2079895fe12e6b9aed99278176, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:a0:da:67:4d:6e:6d:36:b4:29:9c:be:ed:
96:d9:4b:af:4e:80:1f:0e:2e:46:da:d3:a4:5a:57:
97:f8:38:34:00:3b:31:85:f4:fd:86:a7:1e:e9:c6:
47:17:21:10:1c:74:03:7f:d0:67:4a:c6:47:f1:59:
d6:3d:9a:21:31:d3:28:1e:af:21:39:a9:ec:23:f8:
8c:71:87:f0:9e:0f:bb:fd:41:cd:09:a4:f0:01:ce:
36:2f:41:6e:b7:1c:59:d8:d4:a3:51:8c:6e:50:00:
11:3f:32:e4:25:05:99:8f:22:82:8d:59:96:ca:50:
b3:63:93:7e:46:de:f0:72:07:8a:2f:e1:8c:fb:cd:
5f:7c:49:5c:96:77:f0:44:f6:59:dd:8b:36:7d:e7:
8a:53:5d:6a:32:83:46:39:dd:2e:6b:4e:bb:b7:da:
ea:2e:a0:94:fd:6f:2a:8b:cb:7b:11:e5:0a:36:39:
35:08:cb:f6:a0:5d:53:ca:ed:d7:16:bc:74:e3:74:
e9:f5:68:12:d5:d8:a5:14:8c:59:39:29:53:30:d6:
3d:47:24:0f:05:6a:97:a1:68:b5:3b:8c:1e:dd:9a:
da:61:78:a6:36:4d:95:12:cd:34:03:c0:7f:41:f7:
cf:5f:ca:f8:e4:0e:2c:be:23:c9:f9:95:63:c3:0a:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:A8:26:8D:E2:2C:04:F9:A4:C2:94:4B:30:00:0E:FB:81:AC:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
70:2a:a2:5c:bf:97:ab:bf:34:52:f1:7e:72:b9:ad:b9:0b:4c:
4c:b7:23:31:9b:2e:a1:c7:23:dd:3b:1c:ce:21:3d:1a:85:cc:
0a:de:17:d7:9a:ff:61:67:da:5e:3a:b8:60:17:a8:2c:24:e4:
6d:97:24:33:68:ee:dc:cb:ce:1d:23:0b:b7:82:69:78:6f:9c:
a2:bc:5d:c0:6e:1c:e0:eb:6a:30:43:89:8e:34:67:bc:9d:23:
a1:ca:12:7c:7a:0f:e9:ee:2f:92:fb:df:8a:64:4b:e6:4d:ca:
8f:ec:26:a4:e9:6e:94:6c:eb:86:35:2c:1c:13:be:f2:04:58:
e8:ee:89:bc:2e:f4:bc:84:47:0b:00:83:3a:b3:4f:26:31:d6:
8c:e6:35:f9:a4:9f:88:c0:17:9b:13:77:45:d2:b7:84:00:02:
07:3f:19:4a:5a:ee:f5:94:ed:e0:5e:51:f5:89:62:3b:87:21:
39:68:f0:90:13:ea:e7:85:84:90:80:4e:fc:f6:d4:c3:ad:1c:
5f:ab:0c:f6:e8:2f:16:ac:81:4a:60:73:f5:cf:b4:aa:4f:4d:
df:7c:7d:a7:80:b5:99:2d:78:26:9f:8e:a4:d1:ab:75:58:3d:
d6:77:c4:92:8c:c1:71:87:0f:4d:86:b6:fd:38:e1:dd:82:de:
fc:5b:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:41 2025 by rpki-client