Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
File: 27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa (raw, json)
Hash identifier: DTOTCEgwACeoDr3mb7+SbHrSW72yxEVXU6gMKUJqIYY=
Subject key identifier: B4:2F:AF:B9:57:43:5F:E2:4A:FF:27:75:BD:7D:61:54:F8:D9:E4:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69596076796931517091BBFA2369E53F1D908449
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:59:60:76:79:69:31:51:70:91:bb:fa:23:69:e5:3f:1d:90:84:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=491b0f4d394abaa7c4ce0f036474ed8ff95c266829f0c4664a9e6709ef52c848, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:c6:2e:8f:86:b5:a1:01:42:31:0d:b6:41:
2e:0a:24:d5:8c:35:33:b0:f8:4c:02:94:cf:a4:ef:
a9:c1:c3:fb:ef:a7:28:76:12:05:eb:52:92:7b:cb:
fc:c3:82:a4:7a:bb:86:87:ac:ae:82:26:4c:7d:cd:
61:bf:0f:df:e0:82:62:d0:bc:6e:2f:2b:21:39:c5:
93:be:ff:58:0f:2c:bc:6d:88:d5:8c:c2:f4:91:b1:
b4:48:d3:67:a0:40:4a:17:01:c6:1e:79:b8:4f:99:
59:55:6c:c5:7b:73:a5:a7:7e:ed:fb:38:16:3a:68:
bb:a8:c2:10:e9:15:63:bc:3d:c6:dd:e7:c3:e3:0b:
7e:72:21:0e:1b:74:b1:91:98:4f:c1:4a:ed:95:d3:
0b:b8:ce:92:d0:55:82:a4:15:8c:61:af:72:cd:7e:
c8:d6:56:2c:0a:30:82:07:e7:d9:74:2d:66:ac:5c:
3f:c1:3b:31:9c:af:d5:b1:c6:94:4e:74:53:2b:a9:
8f:06:96:3b:a6:26:b1:b4:d6:d8:60:2c:49:f5:17:
a7:c8:21:d0:8f:8e:6e:c1:d4:e0:4d:1f:53:61:ca:
e9:bb:a7:db:db:7e:f8:ec:18:b6:56:37:71:43:68:
ce:90:f7:1b:58:04:fa:d6:fa:ff:9b:c9:dc:20:a6:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:AF:B9:57:43:5F:E2:4A:FF:27:75:BD:7D:61:54:F8:D9:E4:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.176.0/20
Signature Algorithm: sha256WithRSAEncryption
17:5e:e2:98:1b:59:c2:54:06:36:f5:ee:f3:f6:a3:96:35:ef:
c5:10:04:8b:cf:33:f4:07:57:39:c7:1a:cd:4f:6d:ba:9b:7a:
38:16:a1:fc:d6:de:c7:a2:7b:ed:c7:e5:fb:63:15:4f:bb:67:
06:35:5d:8a:de:19:2c:18:e3:4e:ce:73:20:38:6c:71:f9:e8:
a7:b7:2f:38:19:a5:b7:62:3a:84:be:5c:e6:20:b5:2c:f3:82:
be:c4:ff:00:fa:d6:6e:6e:1e:d0:19:69:d2:2e:73:a5:4e:4f:
12:8a:44:4d:eb:47:e2:e0:4e:b2:4d:ee:64:96:23:f5:0a:60:
c2:50:51:48:09:8f:97:2d:3c:52:17:96:d9:bf:e6:19:64:c9:
f3:5d:3a:4f:38:b6:29:1a:83:a5:47:4b:f6:be:62:d5:b1:17:
a3:24:1a:87:f6:96:eb:73:a2:97:a4:50:22:f0:cc:32:82:18:
07:9f:5f:7f:9b:da:70:41:7b:d4:16:1a:3e:08:d9:f5:bb:aa:
fc:cf:ac:fb:95:0c:59:07:9b:e8:df:48:dc:af:ae:80:91:ca:
8b:ed:78:d3:55:7f:d6:45:3a:7a:a6:64:13:f5:9f:1d:9a:49:
ee:d1:d8:bb:e5:1d:7f:32:ed:4b:07:a8:c7:af:fa:d0:76:69:
3c:37:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:41 2025 by rpki-client