Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
File: ec7e5637-f312-4c51-b644-29324b74734e.roa (raw, json)
Hash identifier: 88zr7B/prqOKA02RqdM89H9Q2JdVDVZgQJEPDjbPMLI=
Subject key identifier: 6D:F7:47:D0:11:04:52:7B:0D:5B:18:40:E3:CE:93:C1:26:DB:4F:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67BB27C5FB9ECCFF473515455D3941691992360A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
Signing time: Fri 21 Mar 2025 15:01:31 +0000
ROA not before: Fri 21 Mar 2025 15:01:31 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bb:27:c5:fb:9e:cc:ff:47:35:15:45:5d:39:41:69:19:92:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:01:31 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:03:41:f6:60:75:57:55:a4:82:68:f4:14:
f1:61:fe:d5:7c:6f:91:c7:6a:68:b9:75:0c:c3:54:
ad:70:9a:a7:ed:e9:4d:6a:bd:2d:40:e2:7d:65:54:
d6:2b:93:d2:ab:04:7d:0a:f6:4c:b7:8a:7e:c0:9d:
95:84:00:4c:7e:05:67:4c:1f:f0:34:d1:fb:c3:7e:
3d:32:41:b1:8a:14:fb:a7:6c:c1:1e:db:6d:2d:0d:
31:91:fe:f0:53:e5:21:5f:17:e5:2b:2c:50:84:0f:
6b:18:ca:39:2a:05:c1:8c:9b:74:f3:c5:17:e3:79:
df:dc:0b:69:b0:5e:17:99:c5:35:41:ba:f9:87:ff:
be:29:40:0c:c4:24:8d:43:ca:08:62:35:ad:24:3b:
64:a3:9c:d4:fb:89:ed:a4:84:f1:cb:da:29:fc:7b:
9d:5e:31:e1:cc:49:fb:fc:e6:18:00:dd:7f:94:d3:
a5:07:4d:0c:e2:0b:7d:d3:45:bd:94:0d:87:7e:de:
97:a8:0d:12:e6:94:b4:4d:4f:ba:de:fe:71:25:fb:
2f:01:0d:24:f2:24:7f:38:1c:f9:79:5b:90:03:05:
25:6d:44:16:47:59:a8:38:42:21:88:27:19:92:1f:
d8:84:74:e3:b6:c5:ee:39:a3:5a:49:b6:92:17:ea:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F7:47:D0:11:04:52:7B:0D:5B:18:40:E3:CE:93:C1:26:DB:4F:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:de:1e:d1:47:2c:8e:43:05:8e:56:90:20:1b:40:c7:97:b4:
5a:db:09:37:4f:8d:45:a4:c7:61:c7:d2:cb:78:6e:29:ee:3c:
56:d6:4f:70:1b:e8:ba:2f:b8:37:57:dc:10:b0:00:ca:df:c5:
30:e3:51:b5:b2:28:da:31:35:a0:1d:75:b9:c7:77:46:22:0d:
5f:39:78:b9:0d:17:a4:c1:7a:02:8a:5e:64:5f:15:22:47:6e:
a7:dd:30:84:2d:81:23:75:46:6e:9c:19:48:57:82:a9:6a:33:
10:d5:b0:b2:af:82:95:bf:4b:a6:08:b6:d7:48:f6:c2:c1:4c:
ba:c6:62:aa:4e:a7:e0:c0:b5:6d:43:cd:57:ed:df:a9:f4:f7:
a0:a8:8c:a8:7d:80:f5:ad:ea:51:2c:9f:f0:89:fb:c3:e7:02:
b3:4e:9f:94:3e:c9:a5:b0:cf:8b:2b:17:8b:c8:0c:22:63:54:
25:16:e1:2f:06:20:f1:3e:3c:84:60:19:68:f5:81:bc:a1:6c:
e5:5c:76:a9:c6:f0:f1:db:b0:a5:3b:a9:82:75:1f:17:f3:ad:
17:1b:be:be:35:9e:bc:6d:f8:11:3c:82:ea:f2:f4:1a:9c:ca:
cd:5f:a5:62:53:b1:02:0d:04:18:29:9b:57:98:c8:1b:60:33:
13:b6:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:05 2025 by rpki-client