Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
File: 11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa (raw, json)
Hash identifier: Yx1+zv3QuxrKqpnk1OSui95htyAqSdt7NT+i8QJKfJg=
Subject key identifier: 0E:48:42:DD:22:78:75:F8:33:F7:F9:29:B8:5C:48:44:C6:DE:BD:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24C89B8845A5AC83851D82E7C5D6784B7499C90A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c8:9b:88:45:a5:ac:83:85:1d:82:e7:c5:d6:78:4b:74:99:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=d54a1d95267d1910cd08202eabc4f8584a94eb876a118c07f55be38124193d52, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:a0:d7:ee:98:1d:3f:fe:d2:53:bb:9f:d2:
b0:6f:89:89:f4:24:b5:e2:9c:d9:2f:70:a5:67:67:
05:a0:15:8a:5d:01:7d:0d:1d:63:ce:26:df:c8:f7:
01:fa:50:13:96:ec:37:63:0a:5e:be:4a:76:bd:d2:
df:7d:04:28:6b:34:6e:79:12:d5:e7:a3:70:7b:8c:
80:d1:02:39:0d:ef:79:db:40:c6:4c:80:52:42:5e:
dc:82:4b:ac:a3:45:a9:22:71:5c:8c:9c:ae:47:43:
ed:6e:40:8c:c6:23:1e:e9:b8:a4:cb:03:6f:fc:7f:
53:b4:ae:ef:35:9c:37:9d:e6:8c:cd:d3:5a:e7:98:
aa:a6:4a:c4:e4:70:13:1c:db:33:fe:9e:9a:a1:75:
80:36:64:5e:e0:2e:94:3e:b8:30:1f:f8:a3:61:1a:
64:7f:68:5d:de:47:e7:60:c0:a5:82:f9:9b:c0:61:
c8:cd:60:2d:c3:9a:4f:41:49:1b:10:a4:c2:ab:04:
b5:81:c6:3c:b6:47:fc:6a:d8:e1:78:47:ab:14:2a:
cf:1d:3e:81:eb:96:79:08:18:3e:10:22:f4:84:2e:
85:78:d4:7f:de:7e:b3:32:b7:2e:b8:1a:b1:0a:1b:
fc:eb:09:79:81:ea:de:c5:78:03:91:f0:89:2d:0d:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:42:DD:22:78:75:F8:33:F7:F9:29:B8:5C:48:44:C6:DE:BD:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.64.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:8f:37:42:bd:e9:e3:cb:b1:4c:0d:43:00:0b:e4:84:21:e7:
5b:1d:9c:0a:0a:84:9b:57:5e:d4:3e:12:23:f4:f6:ee:2f:00:
31:2f:1e:f5:fb:69:e9:a4:de:c2:32:7f:a9:ab:77:57:ee:cc:
72:b2:fc:78:b3:6b:ea:fe:0b:e8:bd:1b:2d:0e:16:0a:78:58:
e1:ba:9c:ef:8f:bc:36:2d:49:e7:92:a3:cf:71:56:27:a9:31:
ee:08:b9:7b:c2:da:b1:cf:97:7f:07:93:7e:ae:61:97:b7:ad:
63:64:1c:1e:7b:5e:93:24:83:e3:04:6b:34:19:f8:96:df:d2:
bb:0e:96:22:4a:4f:1b:08:a8:6c:f0:40:72:8b:74:70:47:09:
49:ab:d6:19:0f:a9:ec:4f:99:d3:93:fc:d1:c7:ee:86:f4:49:
f9:76:89:61:7c:28:a9:fe:19:2c:b9:aa:3e:a7:4f:89:89:13:
e0:60:67:70:8f:01:da:92:95:68:06:d2:88:07:b7:95:fa:22:
79:e4:0f:57:f5:80:a4:bb:97:d5:b4:2a:ac:46:9f:4a:78:07:
96:0a:22:47:e0:f0:f1:94:6b:81:14:c4:37:1f:1d:61:9d:5e:
52:4d:eb:b8:62:2f:a4:7e:9f:ba:d1:0d:64:ee:ac:23:f5:0e:
3b:bd:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:47 2025 by rpki-client