Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
File: 2c6881bd-10fc-4994-83fe-43244d2b078a.roa (raw, json)
Hash identifier: Fe5V9YV7HjiJlQbmg35VA86ctUoP3wKB2fNUeKjfOus=
Subject key identifier: C3:98:FB:09:F3:0F:16:73:3F:7B:91:AC:76:38:CF:8E:C4:31:EE:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E8D11F1DA7F0114C4C012D2EAC5BF53869F2C5D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8d:11:f1:da:7f:01:14:c4:c0:12:d2:ea:c5:bf:53:86:9f:2c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=d6970f9a0f3814d4320cc9eb7f0378019a62ca205e27adbd2f20a7ac5849c18e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a2:e8:1f:1f:d5:64:17:49:60:9c:31:b5:69:
ed:09:34:fb:ba:c0:f8:df:4e:a7:38:76:38:b2:8a:
dd:b4:05:98:21:3a:c4:a0:a8:6b:1f:b1:73:0c:67:
81:37:73:fe:0a:33:2d:e0:9b:80:51:08:14:99:99:
d3:86:b6:4b:04:6e:95:ae:f9:f4:17:46:5f:f2:d3:
ad:4d:d7:9b:8d:54:04:fd:6d:12:ff:01:ae:1e:94:
7d:cb:08:4c:00:b1:65:49:3b:d8:d1:97:54:78:f6:
e2:5d:e9:3b:e0:03:54:ba:87:bb:20:dd:fb:43:35:
b2:9b:74:24:80:be:73:50:2e:2b:0a:4c:c1:0a:0f:
14:d2:e1:bb:5b:15:90:db:92:48:9f:2b:95:a5:63:
59:9f:87:15:48:49:4b:b7:94:f9:cd:66:7d:25:11:
b3:27:a7:ea:8c:67:0f:de:99:18:e0:19:e6:63:c9:
f3:31:4f:db:7b:57:83:54:e5:3e:af:f7:d3:14:a7:
bb:b5:dd:3f:e9:f4:de:f7:74:78:bd:1d:f3:46:0e:
40:b6:08:69:03:ed:35:13:c5:10:ba:de:19:4e:ef:
c9:3b:9c:3d:6a:70:e8:d3:a3:4e:50:89:74:92:8a:
1d:81:93:eb:2d:e8:86:22:fb:89:08:25:db:86:61:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:FB:09:F3:0F:16:73:3F:7B:91:AC:76:38:CF:8E:C4:31:EE:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.80.0/20
Signature Algorithm: sha256WithRSAEncryption
48:61:78:b4:f9:23:87:3b:cc:4f:c1:97:51:b0:d9:75:8a:bf:
38:4a:78:b1:8b:c1:39:8d:f1:e4:66:93:6d:95:f9:2a:24:87:
ea:6f:5a:19:3e:ae:d6:23:6b:75:4b:85:9a:90:e4:c2:6a:4f:
51:e2:b5:81:eb:06:d0:a4:55:20:67:4b:5e:66:27:3e:5d:74:
b0:d7:c8:1b:f6:23:1c:a4:5c:44:f7:52:85:b6:8e:47:e2:16:
92:2e:0d:7a:78:cc:02:e2:7c:fa:1c:c0:f6:94:c5:7b:42:0a:
6f:89:d8:a1:5b:a6:63:bc:21:0c:4f:c8:23:a9:73:e2:8c:86:
d9:e7:d7:c0:8f:0c:f1:ed:06:1a:b5:1d:fb:38:5a:90:c4:50:
71:34:dd:a0:c8:2d:bb:c6:b5:e0:fb:33:19:24:d3:49:c6:58:
99:bb:7e:06:66:b8:fe:ec:32:7b:f7:3c:57:97:45:70:b7:6a:
18:6e:51:2b:e9:44:18:44:fb:1b:1d:00:84:ea:77:ca:1f:39:
d8:f0:81:21:73:b3:cd:cb:23:40:81:ee:51:fd:5e:b1:9c:cf:
ba:f3:d7:9f:44:a8:cf:38:89:b8:bd:5f:eb:50:7a:48:b8:94:
f8:c3:de:00:e8:13:0c:b7:2a:c2:8c:f7:fe:3a:94:b7:07:27:
e6:88:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:22 2025 by rpki-client