Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
File: 2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa (raw, json)
Hash identifier: RsTTARFZkVDiOyszNYuEv8Mq1S0QYaU5J2MLrqi9S3w=
Subject key identifier: CA:79:DF:E8:17:6F:2E:45:DF:34:F1:39:7D:03:5B:5A:58:13:95:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 249F78A0D3C55165B0594E1E8F802953177FA33D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9f:78:a0:d3:c5:51:65:b0:59:4e:1e:8f:80:29:53:17:7f:a3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=fd88242e243f61b43c630b68d812c3b1902ebf68670a96fdf268108f89e86963, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:7e:24:f1:61:99:9f:3e:75:8f:21:b1:5b:
5b:61:32:31:08:d8:60:ce:c1:54:82:3a:c6:b5:68:
ca:85:8d:0d:ab:ed:73:d3:55:b0:05:94:d6:9a:56:
e1:a9:58:8e:9e:a6:d6:77:91:17:50:0f:fc:b1:7f:
95:2a:32:a5:ae:f2:ac:03:01:07:82:a9:f7:10:0a:
b1:bf:96:a6:c3:a8:89:ab:9f:84:cc:21:0a:ca:57:
99:90:72:62:87:4d:98:90:a3:7f:f5:03:c8:da:46:
88:b9:b3:98:81:aa:75:59:c8:b3:0d:f2:c3:35:01:
48:17:9c:02:d3:f7:5a:2f:50:6a:cc:aa:b5:f4:cc:
4c:ee:a0:60:32:6d:1c:69:26:c3:f9:8e:25:9d:78:
e4:34:cd:2a:18:ce:10:03:18:25:13:81:ec:51:26:
6a:15:a0:01:b0:cb:65:78:23:38:f3:2b:79:30:59:
41:cd:f0:83:7e:cf:de:fe:2b:06:a3:f3:1a:db:c8:
58:88:a8:b9:c2:8c:78:70:05:4d:89:73:04:e6:50:
f4:34:2d:36:98:18:e9:de:14:30:8b:c3:19:ce:cf:
7d:e0:c1:02:ce:59:bf:04:0c:c6:46:10:73:f3:70:
a7:ab:76:15:50:a2:27:f6:fd:d0:0d:1a:ea:5a:72:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:DF:E8:17:6F:2E:45:DF:34:F1:39:7D:03:5B:5A:58:13:95:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:a3:97:7d:85:2b:a3:dc:18:a8:68:a1:86:c1:5b:50:a4:48:
93:c3:0b:a8:5e:d5:de:b4:72:e1:9c:95:bf:c3:13:a5:41:31:
be:6c:af:64:7e:b4:70:99:22:51:db:e0:ab:be:9a:39:a0:72:
23:d0:ee:26:7f:00:91:f4:34:7d:9d:ad:b5:ae:ad:60:03:52:
0a:8a:b9:1c:92:16:8f:9f:08:cd:6c:fb:df:d7:2c:ba:af:8b:
f6:8f:0b:99:71:88:67:ac:4c:36:fb:79:66:46:73:f6:71:4a:
4e:fe:cd:fd:2f:5b:3b:0f:f6:36:92:9c:98:7c:de:3f:5f:2e:
2d:a8:05:c4:f3:85:92:bb:a6:2e:92:98:f3:dd:7f:a4:7d:d8:
0b:64:75:b5:07:9b:94:05:41:c8:f6:b8:9e:ec:00:68:d7:5b:
11:5e:7a:9d:cc:78:92:db:82:e5:fd:a2:2f:b1:48:7c:d9:7e:
72:2d:7b:21:57:e0:b1:f3:ea:7c:1e:08:57:94:de:7b:bb:eb:
58:17:5a:6c:03:9c:51:69:5d:f3:c8:33:b6:7b:a7:b9:05:85:
db:8d:06:bb:f6:5b:86:dd:fc:48:ed:15:c9:6b:1c:76:79:74:
94:e4:57:4b:41:6c:4b:2d:50:7c:ed:34:56:d4:2f:89:57:c4:
45:d1:df:49
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUJJ94oNPFUWWwWU4ej4ApUxd/oz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjcwMDAwMDBaFw0yNTAzMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGZkODgyNDJlMjQzZjYxYjQzYzYzMGI2OGQ4MTJjM2IxOTAyZWJmNjg2NzBh
OTZmZGYyNjgxMDhmODllODY5NjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM2GfiTxYZmfPnWPIbFbW2EyMQjYYM7BVII6xrVoyoWNDavtc9NVsAWU1ppW
4alYjp6m1neRF1AP/LF/lSoypa7yrAMBB4Kp9xAKsb+WpsOoiaufhMwhCspXmZBy
YodNmJCjf/UDyNpGiLmzmIGqdVnIsw3ywzUBSBecAtP3Wi9QasyqtfTMTO6gYDJt
HGkmw/mOJZ145DTNKhjOEAMYJROB7FEmahWgAbDLZXgjOPMreTBZQc3wg37P3v4r
BqPzGtvIWIioucKMeHAFTYlzBOZQ9DQtNpgY6d4UMIvDGc7PfeDBAs5ZvwQMxkYQ
c/Nwp6t2FVCiJ/b90A0a6lpyM/8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTKed/o
F28uRd808Tl9A1taWBOVljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmVhYjRjNDItNWEwNi00YjQ1LWIwY2YtOTJmMjNiYTI3OGY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4z4DAN
BgkqhkiG9w0BAQsFAAOCAQEAqaOXfYUro9wYqGihhsFbUKRIk8MLqF7V3rRy4ZyV
v8MTpUExvmyvZH60cJkiUdvgq76aOaByI9DuJn8AkfQ0fZ2tta6tYANSCoq5HJIW
j58IzWz739csuq+L9o8LmXGIZ6xMNvt5ZkZz9nFKTv7N/S9bOw/2NpKcmHzeP18u
LagFxPOFkrumLpKY891/pH3YC2R1tQeblAVByPa4nuwAaNdbEV56ncx4ktuC5f2i
L7FIfNl+ci17IVfgsfPqfB4IV5Tee7vrWBdabAOcUWld88gztnunuQWF240Gu/Zb
ht38SO0VyWscdnl0lORXS0FsSy1QfO00VtQviVfERdHfSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:59 2025 by rpki-client