Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
File: 9386a656-dfeb-4ebf-847d-bd931e09dd13.roa (raw, json)
Hash identifier: hl0/9KBHGF0bTfZP4b7MYc596D1d0QeYBYPSsa8Cy6U=
Subject key identifier: 58:42:AE:2E:01:38:02:F9:04:36:96:D6:C4:D8:63:31:F3:27:1B:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5388AAD2C003435FFD23B9FEAD6F5E86D952242C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
Signing time: Tue 04 Mar 2025 23:50:49 +0000
ROA not before: Tue 04 Mar 2025 23:50:49 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:88:aa:d2:c0:03:43:5f:fd:23:b9:fe:ad:6f:5e:86:d9:52:24:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 4 23:50:49 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:48:18:10:42:e2:92:ab:1d:34:5c:44:1d:
dd:42:71:d6:67:23:19:5f:23:6c:98:1e:f9:5e:7e:
ed:f5:72:da:3e:c1:12:a9:8c:01:89:b8:e2:51:53:
d9:34:e5:de:7b:82:8a:e6:41:83:aa:2a:ba:bb:01:
dc:ef:af:c5:f8:38:d5:aa:b4:dc:e0:1e:63:1b:02:
b8:49:0c:31:45:d2:bf:da:58:bf:f6:37:ef:73:17:
da:c5:12:ae:89:ae:00:0a:0f:4a:58:35:41:60:24:
d0:92:6c:5a:0d:cb:4a:04:23:00:9a:4e:4e:35:d9:
31:4f:bb:7f:5e:35:f1:11:c4:d0:00:e8:87:8b:b2:
a3:88:cc:9a:3b:b1:ec:32:6f:a9:69:5a:55:64:83:
a2:0a:99:9f:0d:eb:00:c3:79:21:30:47:6b:2b:e9:
d9:66:a8:c6:11:2d:9d:99:9b:37:f4:5e:ad:43:5f:
bf:02:e2:12:fc:4d:49:c4:23:58:ca:73:32:90:64:
19:4a:1d:33:7c:40:37:c2:a0:69:c7:ab:d7:8b:ed:
0f:a5:7f:b0:b8:e6:92:a1:dc:e7:36:09:a3:cf:aa:
14:6b:f9:5f:ab:fa:79:52:9c:8d:de:a2:1d:00:46:
b0:c5:c1:ba:62:54:f8:08:ab:c4:7c:9c:81:ae:40:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:AE:2E:01:38:02:F9:04:36:96:D6:C4:D8:63:31:F3:27:1B:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:36:ea:80:5a:f2:20:2a:dc:2c:46:c6:4d:c4:20:10:b1:00:
66:d6:d8:14:7a:b5:7b:bd:ed:cd:88:f2:59:ba:f2:a7:d0:f3:
4c:1a:68:3e:84:72:fe:b2:0e:cc:91:e2:75:bb:19:ed:46:01:
42:29:a8:1d:ad:a7:8d:a0:72:f0:34:30:2c:0a:4b:2c:4b:3b:
85:7c:45:1c:11:9c:5b:30:a1:eb:19:2f:89:b1:56:3c:64:6d:
e7:71:1c:08:0b:fc:98:1c:12:41:7d:0c:22:47:52:45:4d:b5:
a1:b3:d9:30:6f:fc:83:34:2c:73:dc:51:71:ff:43:61:95:51:
01:b9:fa:37:9a:61:47:a5:f0:03:b0:38:8a:86:2f:28:15:66:
d8:50:cf:2c:bd:24:d0:fa:84:fe:bb:8a:1b:a1:46:61:8f:8e:
94:6d:ff:39:a3:45:68:e2:4e:ad:0e:72:2d:a5:38:3e:7f:47:
2f:11:76:f3:27:10:c7:cf:43:32:c9:7f:ba:6a:5b:43:9b:74:
b1:4b:8d:38:6a:d3:cb:4a:d9:e6:75:76:89:4f:59:76:33:d9:
18:24:90:e9:08:a5:46:5d:6b:95:37:44:60:41:c8:73:29:ea:
8a:6d:39:f0:ee:00:38:14:8b:75:a3:d9:67:ee:0f:27:b4:09:
ec:11:9f:3e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUU4iq0sADQ1/9I7n+rW9ehtlSJCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDQyMzUwNDlaFw0yNTA0MDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0NmUwYmE5NGUxNmNlOTg1ZjBkMWUyZjM3Yzk2YTEwZjY2MmIxYjViZTk4
ZjBlN2E0MWVhYjVjNzczYmI4N2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJXkSBgQQuKSqx00XEQd3UJx1mcjGV8jbJge+V5+7fVy2j7BEqmMAYm44lFT
2TTl3nuCiuZBg6oqursB3O+vxfg41aq03OAeYxsCuEkMMUXSv9pYv/Y373MX2sUS
romuAAoPSlg1QWAk0JJsWg3LSgQjAJpOTjXZMU+7f1418RHE0ADoh4uyo4jMmjux
7DJvqWlaVWSDogqZnw3rAMN5ITBHayvp2WaoxhEtnZmbN/RerUNfvwLiEvxNScQj
WMpzMpBkGUodM3xAN8Kgacer14vtD6V/sLjmkqHc5zYJo8+qFGv5X6v6eVKcjd6i
HQBGsMXBumJU+AirxHycga5AFB0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRYQq4u
ATgC+QQ2ltbE2GMx8ycbSDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTM4NmE2NTYtZGZlYi00ZWJmLTg0N2QtYmQ5MzFlMDlkZDEzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgYDAN
BgkqhkiG9w0BAQsFAAOCAQEAxjbqgFryICrcLEbGTcQgELEAZtbYFHq1e73tzYjy
Wbryp9DzTBpoPoRy/rIOzJHidbsZ7UYBQimoHa2njaBy8DQwLApLLEs7hXxFHBGc
WzCh6xkvibFWPGRt53EcCAv8mBwSQX0MIkdSRU21obPZMG/8gzQsc9xRcf9DYZVR
Abn6N5phR6XwA7A4ioYvKBVm2FDPLL0k0PqE/ruKG6FGYY+OlG3/OaNFaOJOrQ5y
LaU4Pn9HLxF28ycQx89DMsl/umpbQ5t0sUuNOGrTy0rZ5nV2iU9ZdjPZGCSQ6Qil
Rl1rlTdEYEHIcynqim058O4AOBSLdaPZZ+4PJ7QJ7BGfPg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:48 2025 by rpki-client