Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
File: 18d47c03-cff3-4fc4-bd85-07c1063f7047.roa (raw, json)
Hash identifier: 3TvV7gQu98AKBNNRdW22VkaXpSkm78VNjCbq5158h5A=
Subject key identifier: 1D:DB:8F:85:C7:6A:AC:B5:88:64:9F:61:EE:91:0F:27:4C:FC:88:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26B4A016958A0FEDA2EF39387D55BA64C8382535
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b4:a0:16:95:8a:0f:ed:a2:ef:39:38:7d:55:ba:64:c8:38:25:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=b7d43f3c63c728a9d1bf9723e03d7dff8d84142d7db08aa127c773cef517bb97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:a0:53:01:fe:67:8f:f9:db:81:64:d0:a5:
ce:ad:d3:53:50:44:f4:9e:74:0e:62:7a:f7:26:c3:
f7:e8:49:5d:56:42:a5:16:69:fc:fc:fe:af:ac:da:
77:b5:d2:6d:79:8e:c9:e2:d5:6b:7c:e0:72:02:9e:
b8:24:68:51:ae:75:14:5b:66:8a:63:e8:61:a7:29:
36:5a:57:f4:53:04:8c:58:53:9e:90:02:c4:f1:5b:
e9:ad:c7:18:da:57:26:5b:ea:74:83:7c:d4:93:3e:
b6:db:e2:e5:2a:de:63:b4:7c:40:4f:f5:54:af:cd:
0b:1c:23:67:d0:f9:ce:71:49:f9:b6:6a:2b:de:32:
a2:dc:dc:dd:c7:0e:86:65:f6:4c:b4:54:f1:f0:d0:
25:6f:76:2b:a4:2c:79:98:85:fd:51:3c:a9:ae:2b:
12:3b:22:f8:ef:54:7a:9d:4b:66:de:d4:3b:d3:18:
f1:7b:7e:14:5b:24:ea:70:13:8a:4a:35:fa:4b:e8:
20:a7:9a:e2:00:dc:13:47:7f:33:ac:c2:4c:2e:f1:
1d:03:0f:bc:f7:17:22:50:ea:ae:9c:af:48:f7:e9:
68:7d:fa:46:d0:77:4b:cf:e2:a6:7a:1f:f8:b5:4c:
49:6c:a3:ec:96:bc:93:7c:49:41:25:da:98:2e:ac:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:8F:85:C7:6A:AC:B5:88:64:9F:61:EE:91:0F:27:4C:FC:88:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:c6:37:bd:a4:ca:7d:22:50:5d:66:44:a7:a5:4f:db:a6:6c:
e7:f7:e7:fb:f9:2b:fa:58:d6:11:04:63:fd:9e:2f:ff:95:97:
1d:ba:31:55:12:ee:e6:2a:70:4e:4f:d8:ed:71:9e:4b:79:b0:
92:ef:d5:31:4c:7c:12:b0:91:aa:50:8f:66:28:58:8e:80:86:
9a:47:e7:5a:fe:37:bd:3a:28:c5:f4:64:c9:fd:9e:5c:5f:74:
4c:d8:35:3b:f8:d2:af:f5:ec:fb:07:fe:60:16:3a:44:5b:c6:
2d:e7:5c:e1:b6:21:44:a8:fc:d1:8e:a8:6c:41:e4:d3:2b:f3:
f9:bb:fb:e3:93:5e:4b:8c:01:45:49:d7:20:30:92:34:84:87:
cc:f7:25:ab:44:79:e1:0c:bf:21:31:99:28:72:da:50:d2:92:
b8:40:d8:f7:f0:09:08:2a:03:c7:30:98:30:08:f6:bb:98:f0:
cd:31:4f:da:81:93:a3:77:6a:29:a3:ca:d1:93:82:cf:1b:7e:
25:4f:7b:9e:7d:c8:0a:c8:0b:92:46:36:f5:34:d6:d8:a5:8f:
1c:47:03:ad:75:ed:22:8f:9f:a7:af:49:03:9f:30:cd:cf:7a:
14:7c:9d:19:73:53:3a:e4:9b:62:c0:8c:47:72:08:6e:cd:04:
e7:9e:cc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:43:19 2025 by rpki-client