Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
File: 19bd833c-9eac-4b19-b264-a191d9c1b939.roa (raw, json)
Hash identifier: M26GbhY5mf0x/m3Cx27p+y+GyN1oWR6xgxMx43tzRKY=
Subject key identifier: 3C:74:A3:E7:22:41:5F:FE:0B:83:16:FF:DA:EF:79:9E:29:E7:CA:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4AEB191C35108A5FA1FF9ACE2A5FA66BD844755C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:eb:19:1c:35:10:8a:5f:a1:ff:9a:ce:2a:5f:a6:6b:d8:44:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=f051da14c6ef5ed52fe807ed30242eeb0957605b5c7f9b5e70ea4b21c3b31226, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:2a:f8:29:40:5e:b9:25:cc:ea:b6:35:7c:
b9:f6:39:aa:af:30:42:11:fe:0a:1b:d6:b2:77:ae:
d5:37:43:b7:99:28:94:ff:c5:4c:d6:8f:67:76:0f:
27:87:c4:21:2c:87:5d:eb:a5:1a:c2:61:bf:d4:b6:
ec:de:7e:dc:a1:fc:0e:31:13:c4:74:47:c8:86:f0:
04:5d:ec:94:af:b6:0f:0d:30:6c:85:3d:92:16:13:
8d:0b:a3:a8:51:40:10:c7:cf:2e:13:e5:e1:dc:15:
15:5c:3b:46:87:bb:a7:ab:64:7d:c6:99:e6:b0:a1:
56:6f:d6:98:6e:ca:ad:40:39:83:6f:c3:1d:a9:d3:
92:e6:77:bc:fa:dd:c9:d1:60:e2:5b:af:01:73:c9:
83:9f:b2:61:5b:19:8a:d9:b1:f2:73:9b:71:4e:ac:
0e:1b:9d:50:10:a4:40:80:da:3b:ab:15:27:1f:f1:
c4:34:d2:44:e6:e1:d8:29:9e:b5:4f:1c:5b:7c:74:
64:d0:23:45:55:5d:a1:1c:ed:bd:29:16:a7:c0:ac:
f5:76:64:b3:96:dd:81:37:d1:ab:05:0d:75:91:66:
ca:d0:1c:3e:10:40:ad:64:7d:fb:8d:76:11:e0:0e:
69:77:9b:ef:d7:2e:1b:1a:8e:3a:69:e1:1f:40:7e:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:A3:E7:22:41:5F:FE:0B:83:16:FF:DA:EF:79:9E:29:E7:CA:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
63:b4:54:b9:3a:57:63:5c:47:95:c9:8c:32:2e:1b:62:04:00:
73:b1:60:8b:dc:a6:d0:23:5d:59:94:dc:28:90:83:7e:ec:3d:
c8:b3:ab:46:7f:35:68:44:97:12:0e:82:a6:97:1b:73:19:3f:
5f:89:b6:a2:49:1c:80:3f:ee:6a:e0:bb:1f:78:b8:1d:33:1b:
d4:92:fb:fa:bd:ab:b2:06:60:83:bc:91:55:55:08:1a:cd:10:
6e:9a:9e:3f:97:18:a8:d4:3c:1d:89:02:b1:79:16:ef:d6:8d:
af:96:3b:e4:bb:d2:77:e8:7a:07:32:37:98:65:e2:a2:a5:15:
69:10:1b:2a:cd:16:30:bb:a5:dc:44:bf:72:d2:67:9a:94:5b:
f5:cb:2a:a1:ea:02:37:5a:b3:4a:74:80:7d:18:a6:d1:99:cb:
7d:aa:ce:7b:1f:0b:ad:2c:1f:76:ec:e1:d3:17:29:b7:78:23:
d7:87:5f:89:ed:9d:21:ec:b3:71:4c:47:a9:d0:6d:00:f6:13:
ad:de:bb:46:d8:38:77:d3:66:54:8c:46:a5:8b:4f:1c:44:0b:
86:52:e8:de:6b:00:6f:96:db:e2:70:51:9b:f0:fa:e5:4b:2a:
7d:cd:56:f4:8c:25:b4:8a:f0:df:83:f4:9f:bb:6e:57:f2:fb:
a3:7c:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:01 2025 by rpki-client