Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa
File: 07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa (raw, json)
Hash identifier: 4dYPbUMnF/7UviHofoBISI7SQtLalA/mzxtxsTgMQGI=
Subject key identifier: 6E:68:87:AC:55:7B:34:EF:CD:5C:EA:B5:B2:8A:48:14:BF:16:26:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4644B431FEE0E4958464AA149A891FBF4E8A412C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:44:b4:31:fe:e0:e4:95:84:64:aa:14:9a:89:1f:bf:4e:8a:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=31982cbd364be31b486d4472050bb724f75fcc8e7d800cfe0dd38e073698d636, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:c5:60:e1:a6:9f:50:fb:f0:5c:d1:0e:6a:
91:4f:8d:99:d2:bc:75:f8:a6:f4:e1:ff:1a:14:86:
a4:93:8e:f4:64:9a:57:a5:89:6d:05:31:68:54:ed:
f3:e0:05:bb:8d:43:5c:20:1d:29:3b:ca:f6:bb:11:
f6:1e:49:ec:4f:ff:bb:8b:cd:c6:29:00:a8:3b:b7:
59:6d:5f:3e:d9:92:a0:d0:19:52:af:ae:3a:04:4a:
fe:59:69:c5:e4:41:0d:57:d6:51:1e:6c:c9:91:8a:
4f:59:5b:7a:50:3c:63:36:74:31:dc:63:74:b7:93:
7b:c8:61:d3:bf:80:52:a8:59:73:41:29:c7:5a:0d:
2f:a9:83:06:80:08:34:38:c2:7a:6a:ff:7e:a6:22:
c0:82:8a:50:be:c5:f7:d1:8f:db:f7:16:94:f0:6a:
98:4f:a1:13:48:7e:00:5e:17:f0:a4:45:8d:85:44:
15:ce:e6:a6:8e:18:ea:aa:07:8e:ae:e2:91:13:e4:
ac:a5:39:d1:ed:9e:3f:09:2b:52:e6:68:88:5b:21:
5f:63:fe:e6:7e:96:99:3c:e1:a7:00:45:c5:d3:a0:
9e:77:e3:10:95:c5:a0:ff:54:d9:f1:8e:73:0f:2a:
9c:f4:fb:4e:f7:37:b8:06:ed:81:15:c7:2a:19:82:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:87:AC:55:7B:34:EF:CD:5C:EA:B5:B2:8A:48:14:BF:16:26:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:95:c2:15:9d:20:5c:d6:ae:dd:24:c0:f2:e2:fc:ad:7e:ed:
5d:2e:1e:ac:f1:d1:f7:59:7b:e7:b9:a0:35:7d:c9:a9:fc:7b:
09:a1:05:ef:62:b3:34:2d:7f:42:e9:c1:3d:2a:73:11:ff:e5:
d3:58:0a:de:69:8e:b7:52:fb:99:09:e4:cd:57:6a:28:c5:e1:
e2:63:85:cd:ee:0a:e2:96:9c:1f:27:6f:89:bd:52:ac:47:8a:
b4:32:da:21:e0:22:bb:6c:f9:a9:2c:da:87:7a:ea:db:50:50:
79:19:0c:77:ee:56:ea:8c:97:7a:90:37:9c:09:92:f0:02:21:
3a:ee:ef:8d:2e:cf:8c:d9:13:50:de:b2:11:ac:34:88:15:35:
e6:b6:0d:03:57:e5:6c:9c:52:e8:81:8c:a2:14:84:02:95:95:
30:5e:05:c2:2f:d3:71:d5:ff:29:92:58:c9:2c:ab:88:0d:7b:
2e:2d:d0:c2:52:90:44:1c:3c:bc:5b:3a:27:11:3c:b5:86:e7:
d6:2f:00:69:a5:4c:9d:70:10:7d:1c:40:5e:e2:ab:7f:76:24:
66:e1:8f:05:2b:aa:c9:02:08:fe:87:80:9a:f2:c5:f1:1f:e0:
21:d2:37:dc:50:60:45:24:b4:29:52:8c:40:ae:d1:75:97:9f:
42:60:81:5d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURkS0Mf7g5JWEZKoUmokfv06KQSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjcwMDAwMDBaFw0yNTAzMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDMxOTgyY2JkMzY0YmUzMWI0ODZkNDQ3MjA1MGJiNzI0Zjc1ZmNjOGU3ZDgw
MGNmZTBkZDM4ZTA3MzY5OGQ2MzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJWxWDhpp9Q+/Bc0Q5qkU+NmdK8dfim9OH/GhSGpJOO9GSaV6WJbQUxaFTt
8+AFu41DXCAdKTvK9rsR9h5J7E//u4vNxikAqDu3WW1fPtmSoNAZUq+uOgRK/llp
xeRBDVfWUR5syZGKT1lbelA8YzZ0MdxjdLeTe8hh07+AUqhZc0Epx1oNL6mDBoAI
NDjCemr/fqYiwIKKUL7F99GP2/cWlPBqmE+hE0h+AF4X8KRFjYVEFc7mpo4Y6qoH
jq7ikRPkrKU50e2ePwkrUuZoiFshX2P+5n6WmTzhpwBFxdOgnnfjEJXFoP9U2fGO
cw8qnPT7Tvc3uAbtgRXHKhmCHikCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRuaIes
VXs0781c6rWyikgUvxYmZDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDcxNDRmMzgtZWQ0Ni00MGJjLWEzZWQtMzA3ODVjMGNjM2UyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6JsDAN
BgkqhkiG9w0BAQsFAAOCAQEAapXCFZ0gXNau3STA8uL8rX7tXS4erPHR91l757mg
NX3Jqfx7CaEF72KzNC1/QunBPSpzEf/l01gK3mmOt1L7mQnkzVdqKMXh4mOFze4K
4pacHydvib1SrEeKtDLaIeAiu2z5qSzah3rq21BQeRkMd+5W6oyXepA3nAmS8AIh
Ou7vjS7PjNkTUN6yEaw0iBU15rYNA1flbJxS6IGMohSEApWVMF4Fwi/TcdX/KZJY
ySyriA17Li3QwlKQRBw8vFs6JxE8tYbn1i8AaaVMnXAQfRxAXuKrf3YkZuGPBSuq
yQII/oeAmvLF8R/gIdI33FBgRSS0KVKMQK7RdZefQmCBXQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:14 2025 by rpki-client