Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
File: ca3047ed-6074-479d-9d85-26334085e41c.roa (raw, json)
Hash identifier: oxUZ/fgflfB5ik7zCUoluGjRJ281SBAXhqUl52bCTcM=
Subject key identifier: B3:57:04:F4:96:1B:12:C5:B8:1A:A4:0F:D1:AA:B7:E3:07:91:76:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E287DA03E8AB57464ED474988D326F57ABB4787
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
Signing time: Fri 21 Mar 2025 15:01:28 +0000
ROA not before: Fri 21 Mar 2025 15:01:28 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:28:7d:a0:3e:8a:b5:74:64:ed:47:49:88:d3:26:f5:7a:bb:47:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:01:28 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:a9:36:d2:d8:15:d7:96:63:af:16:e3:d6:
2a:b7:4d:53:42:77:77:ba:ff:d9:39:f7:b9:26:c7:
c1:5b:3b:b8:85:0e:7a:ca:3f:d5:cb:b8:bc:56:52:
b4:ce:fd:a1:12:9d:b0:ed:84:fd:be:cd:7c:01:8f:
e3:8c:51:e9:41:58:79:54:a6:c0:2c:4f:2c:88:0c:
a7:08:ef:86:e8:99:5e:24:e3:d3:ea:99:b2:fe:f3:
8a:df:33:0d:cb:f9:43:5b:46:e7:02:45:33:3e:14:
2e:7d:d6:70:ea:dc:ba:a7:01:33:06:3c:7f:e3:98:
64:bf:12:7e:80:75:d6:28:fd:2d:7b:e8:26:5f:89:
7d:07:b4:37:35:56:85:04:80:b4:c9:02:40:ba:93:
e9:6e:21:d5:2d:f0:ab:61:35:b5:03:5a:0b:aa:db:
b2:46:4b:e1:a8:8d:c2:a0:84:d9:64:77:ba:50:fc:
94:13:be:04:3c:4a:fc:df:ae:24:4b:5c:38:0e:a7:
be:11:4c:af:87:04:43:02:d9:73:3a:8f:34:82:18:
f8:d0:99:68:49:7f:ee:5c:53:03:35:19:a0:f4:85:
c6:f5:4e:9a:c4:0a:26:0b:05:69:ee:e7:99:3c:98:
03:4e:94:e5:71:f5:08:26:3b:3b:17:3d:69:f8:82:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:04:F4:96:1B:12:C5:B8:1A:A4:0F:D1:AA:B7:E3:07:91:76:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:dc:fb:10:a1:ee:b9:51:c1:bd:8e:28:3e:1b:fb:aa:e6:3f:
21:36:41:b3:27:7c:6d:17:3e:5a:94:c7:3b:c9:0b:63:05:2d:
74:62:66:c4:c9:96:6d:7c:e1:5f:c8:e4:ea:a8:14:27:5b:e9:
35:6f:7f:d5:ae:43:27:e3:01:02:b9:c6:4d:aa:04:73:fe:4c:
61:02:d2:3b:c7:70:9f:a9:24:f2:bf:d4:28:91:62:02:6f:65:
5a:d3:8b:93:20:6d:b2:d1:31:07:a1:0f:98:bb:a4:3b:1e:58:
4f:f8:9e:30:48:a0:99:8a:0e:29:16:3e:03:89:d3:cb:c6:3a:
07:e6:63:f1:94:14:06:c0:47:0a:18:fa:47:20:1c:da:06:e0:
92:cf:7d:1d:29:55:35:52:04:41:96:5a:ca:19:75:40:02:da:
93:b6:3c:48:ab:d5:1e:6a:e7:86:62:a4:44:8d:d0:7d:16:df:
ff:ba:06:d9:ae:29:e0:06:58:63:b6:de:91:6a:35:ae:7a:71:
6a:17:96:dc:eb:13:fa:9c:8b:47:08:51:96:cf:f6:b1:85:ca:
e9:4a:41:7a:da:e8:29:48:6d:67:dd:02:80:d3:ad:e5:a2:7a:
e6:76:07:60:4f:87:10:0a:22:7d:4f:d5:a9:3c:6a:15:f4:9c:
79:5b:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:15 2025 by rpki-client