Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
File: ec82a459-cf20-418a-8b9d-03c08dc90b73.roa (raw, json)
Hash identifier: vxvjvNL+X27X4h5hwJLO05CE4choieduQK/jFIXW4Q0=
Subject key identifier: CE:19:E6:87:F1:13:01:77:C7:DA:4F:9E:B9:AC:97:6D:71:E5:11:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34F220E57BE6686018EE86B238B5DEDEE5BF990A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f2:20:e5:7b:e6:68:60:18:ee:86:b2:38:b5:de:de:e5:bf:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=0e9b6bc22e6e9aef47c2385c655b91443a7b60a71d8109fde9f205bdaedb0665, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:1e:67:39:ad:34:4c:00:2b:b5:af:a9:13:
fe:9c:07:2f:e4:11:08:e6:21:e9:19:a9:7c:88:77:
93:2e:d5:e6:7e:21:d8:e6:8c:9f:d7:fb:56:28:41:
35:a2:a5:18:f2:2d:2f:3d:13:b9:72:68:3b:cf:46:
84:b9:69:3b:d9:39:48:42:93:8e:86:72:ad:d1:89:
14:cb:59:f5:7d:f4:68:f2:04:47:3f:6f:fc:3f:22:
c5:8b:36:7e:fb:e5:e8:0b:4e:4c:3e:78:e8:75:5c:
e2:41:b0:e6:c9:ec:bf:1f:dd:54:f0:45:21:8c:14:
25:81:1a:f0:38:5b:90:b1:d3:14:8e:d9:ba:36:38:
60:3e:8a:5f:eb:9e:f9:1e:fd:3a:d5:b9:04:4c:7e:
5d:26:6a:a3:e0:1d:ed:aa:fe:16:3e:83:60:12:33:
70:16:fa:1c:16:7d:b7:3d:cd:82:6e:5b:43:04:d1:
98:f6:7e:1d:37:4d:47:4a:5f:f3:37:98:db:0c:ee:
07:15:a4:b7:2f:86:79:ad:2f:e5:24:c5:d0:fd:1f:
fb:1c:e5:41:40:77:d5:4f:22:f8:c0:67:c6:4c:da:
72:46:53:ed:ad:3c:d0:1f:17:70:42:f6:3b:31:fd:
f8:e2:cb:1b:eb:2c:56:e9:1d:b9:b4:9b:f6:28:5f:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:E6:87:F1:13:01:77:C7:DA:4F:9E:B9:AC:97:6D:71:E5:11:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:93:97:e3:fd:be:0a:28:23:a4:5b:b9:4e:ef:f8:3b:3e:d5:
2c:df:b2:d8:8a:99:56:6d:59:f2:2e:b0:bb:36:b1:14:90:ac:
94:26:72:89:1c:fe:10:c0:19:5d:c0:e9:e4:63:ac:45:9f:43:
f3:95:ad:99:5b:7f:25:9e:9d:62:45:f1:d3:49:ad:87:4c:c8:
63:79:76:ed:62:ae:ff:65:ec:cc:26:14:ce:23:23:bc:57:85:
38:25:18:a0:03:eb:ed:ff:ce:b4:7d:c4:e5:03:de:eb:4a:21:
eb:1c:91:3f:a0:d0:2f:96:f9:16:2c:3b:4e:62:49:23:02:f0:
6f:b2:9b:76:c5:8d:90:8f:1a:2f:ed:eb:b4:57:b6:e1:4f:fd:
d6:c8:2b:b5:8f:c7:5f:51:73:24:f9:6a:78:af:49:8e:08:56:
5b:bf:d5:c4:43:22:65:a8:13:c1:ab:17:c0:bf:cf:89:ca:fa:
7c:95:b3:e6:4d:b8:a8:9f:2f:28:91:9b:7f:90:95:e9:79:99:
6d:c2:2e:2c:4c:0e:f6:96:41:e6:43:35:13:51:48:d1:d4:37:
6a:ae:c5:36:c4:49:19:8c:99:86:98:73:d4:01:05:ca:60:fd:
57:50:b4:89:89:42:ef:e4:d8:2a:13:f1:40:ed:6f:f3:7b:88:
34:ce:c1:e3
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNPIg5XvmaGAY7oayOLXe3uW/mQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDBlOWI2YmMyMmU2ZTlhZWY0N2MyMzg1YzY1NWI5MTQ0M2E3YjYwYTcxZDgx
MDlmZGU5ZjIwNWJkYWVkYjA2NjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAObsHmc5rTRMACu1r6kT/pwHL+QRCOYh6RmpfIh3ky7V5n4h2OaMn9f7VihB
NaKlGPItLz0TuXJoO89GhLlpO9k5SEKTjoZyrdGJFMtZ9X30aPIERz9v/D8ixYs2
fvvl6AtOTD546HVc4kGw5snsvx/dVPBFIYwUJYEa8DhbkLHTFI7ZujY4YD6KX+ue
+R79OtW5BEx+XSZqo+Ad7ar+Fj6DYBIzcBb6HBZ9tz3Ngm5bQwTRmPZ+HTdNR0pf
8zeY2wzuBxWkty+Gea0v5STF0P0f+xzlQUB31U8i+MBnxkzackZT7a080B8XcEL2
OzH9+OLLG+ssVukdubSb9ihfxw8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTOGeaH
8RMBd8faT565rJdtceURwDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWM4MmE0NTktY2YyMC00MThhLThiOWQtMDNjMDhkYzkwYjczLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE99AzAN
BgkqhkiG9w0BAQsFAAOCAQEAoZOX4/2+CigjpFu5Tu/4Oz7VLN+y2IqZVm1Z8i6w
uzaxFJCslCZyiRz+EMAZXcDp5GOsRZ9D85WtmVt/JZ6dYkXx00mth0zIY3l27WKu
/2XszCYUziMjvFeFOCUYoAPr7f/OtH3E5QPe60oh6xyRP6DQL5b5Fiw7TmJJIwLw
b7KbdsWNkI8aL+3rtFe24U/91sgrtY/HX1FzJPlqeK9JjghWW7/VxEMiZagTwasX
wL/Picr6fJWz5k24qJ8vKJGbf5CV6XmZbcIuLEwO9pZB5kM1E1FI0dQ3aq7FNsRJ
GYyZhphz1AEFymD9V1C0iYlC7+TYKhPxQO1v83uINM7B4w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:58 2025 by rpki-client