Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: fqXaYozAuSI5NpvMS2hmOgqYJwU6Wv2KRG+I8SxTDvA=
Subject key identifier: 55:5A:D5:1C:50:B4:73:38:0B:A9:90:2C:09:BF:FC:A1:05:7E:85:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30EA8DC9E7C93D0C2FCE21D433C193CBA0255421
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Fri 07 Mar 2025 15:10:18 +0000
ROA not before: Fri 07 Mar 2025 15:10:18 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ea:8d:c9:e7:c9:3d:0c:2f:ce:21:d4:33:c1:93:cb:a0:25:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 7 15:10:18 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:eb:83:f4:22:92:8f:da:86:0f:83:c0:f3:
f8:33:79:3c:d4:af:c3:9c:91:a0:92:53:f5:65:fe:
50:1d:42:80:db:e8:fd:35:b6:97:80:7f:c7:57:49:
70:34:e8:33:a1:c8:38:9f:03:08:8b:10:b3:9d:62:
ef:4b:41:31:39:c1:2c:98:13:89:54:38:97:62:a0:
dc:dd:a4:6b:19:8f:0d:f9:52:21:ad:3c:43:a8:4f:
65:44:15:86:8f:71:bc:1c:89:7e:aa:ba:e1:2c:46:
a0:b7:88:51:12:84:4b:50:00:78:30:c0:26:a7:07:
38:90:41:d0:87:7e:6b:5b:90:ec:b0:c9:d4:99:d8:
af:ed:4b:51:3c:fc:c0:03:83:bf:9d:49:d9:67:fb:
45:71:73:b5:7b:aa:94:d2:bf:c6:1d:c9:17:e3:bd:
6d:1d:89:43:3b:61:7d:ce:69:5e:f8:6f:11:df:20:
e1:dc:be:42:e6:5c:c9:90:16:99:dd:a0:c6:55:df:
93:05:33:82:34:9b:80:fc:5c:d9:2f:d4:b0:45:f1:
51:a4:7a:93:b4:c8:42:b7:37:4e:bc:cc:03:43:63:
f6:83:c0:00:15:f7:9f:6c:04:75:88:35:e2:fa:e7:
bc:39:08:65:b9:9b:5a:94:8a:89:e0:6c:c0:fa:72:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:D5:1C:50:B4:73:38:0B:A9:90:2C:09:BF:FC:A1:05:7E:85:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:90:34:bb:ca:4f:85:1d:f3:df:bf:3f:70:a5:53:ad:35:8d:
2e:ad:85:c7:3f:9d:ae:7d:b3:3c:0c:64:54:f1:34:1f:ae:a7:
83:65:cd:03:d5:d6:5b:0d:9d:a0:02:48:17:06:20:2d:14:c9:
21:47:f8:0e:0f:63:c7:28:e7:8b:7b:10:fd:b0:5d:26:d2:56:
44:eb:43:25:52:c4:53:ec:e5:e1:0a:b6:82:96:4a:43:12:48:
52:a7:99:1b:ea:af:f0:eb:58:15:13:eb:7d:3f:a0:e8:30:6f:
92:3c:fb:26:d8:35:95:74:7b:c2:ab:06:e9:99:fe:d3:c9:b8:
20:50:ca:8c:ef:c1:ad:84:5a:62:12:c8:54:17:5e:df:fe:00:
cf:06:03:3e:b2:25:d5:66:8f:c9:42:bb:df:68:ec:56:0e:2e:
0e:37:28:d2:a5:e2:b2:29:d9:94:85:04:a0:ff:f7:cf:cc:fe:
1a:f7:91:ff:e3:0b:6f:e8:6c:86:27:79:65:2e:97:01:f8:e3:
83:09:4b:31:f1:73:66:a7:f5:26:8a:1a:00:c4:69:37:85:02:
be:75:da:91:c1:12:f7:ef:86:d6:82:41:9e:66:f1:27:de:d3:
76:1f:8b:77:53:d6:14:42:ed:2a:a5:a6:c5:2b:76:73:31:5f:
c5:0b:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:35 2025 by rpki-client