Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
File: 35fbae76-0646-43e5-826f-114b4990545e.roa (raw, json)
Hash identifier: 4JkUwfTSGzcfDuRwPCHspf3Dy7iaO/xqqRAt3WfWc+Q=
Subject key identifier: CE:C6:64:BB:00:E5:6E:1E:91:D5:C6:08:9F:FC:2F:3B:AF:DE:B0:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 177200703D719AEC4EBD7F45EE146077747CF8FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:72:00:70:3d:71:9a:ec:4e:bd:7f:45:ee:14:60:77:74:7c:f8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=afa4e4484f7859265c46350eed4557923ec6d0a278558fb1565d781d83b71e66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:f5:ba:1d:15:00:85:f7:4f:18:05:2c:90:
3c:5f:cc:b5:12:fb:45:6a:84:7d:05:aa:72:d8:ae:
6c:33:de:c5:35:8d:5a:0f:d9:11:b6:04:43:ff:70:
f6:e3:7d:d1:7f:f3:e8:6e:78:e5:fe:0f:35:c5:8e:
86:63:0a:2b:76:83:83:48:ff:7e:0d:a0:40:ca:0e:
61:05:b5:3c:59:06:ac:8b:5b:66:3c:1e:85:4a:86:
69:5b:4e:ab:9e:94:e4:17:7b:e2:fd:c3:b9:77:01:
f6:13:16:8b:e1:08:b9:ca:b8:4e:60:f5:1c:09:35:
f3:dd:1a:b1:f3:df:f1:71:07:13:d3:40:07:f3:70:
4d:2a:39:bc:9b:44:fe:1c:01:ce:0b:b3:6f:22:fc:
75:e9:a2:94:90:28:90:9f:da:85:02:6d:e5:49:73:
b2:83:9b:7a:14:46:ce:65:b1:3c:39:70:a2:c5:8a:
a6:e0:31:78:10:5e:ee:17:cc:fa:99:d8:b6:93:6d:
80:ab:7d:4b:74:b6:6a:cd:ef:64:11:a9:0d:4f:17:
3f:98:ab:11:0e:89:5e:66:22:5c:76:bd:13:c6:fa:
0a:f9:a1:94:f6:5d:8d:17:ea:d6:c2:6d:12:70:8b:
8c:cb:e7:43:ea:2b:4f:f0:eb:01:e7:78:4c:38:4b:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:64:BB:00:E5:6E:1E:91:D5:C6:08:9F:FC:2F:3B:AF:DE:B0:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:b7:15:d9:98:8b:68:89:69:1d:9c:84:db:46:a2:ad:08:03:
03:d0:01:fc:da:29:ad:05:35:56:0d:1b:f1:57:48:6e:6f:a5:
c7:59:c2:c6:23:47:31:7a:1c:a4:a9:6c:42:c2:b1:ed:c0:76:
92:ea:4f:62:a3:73:1c:7a:76:c5:07:e7:e5:f1:9d:c1:99:21:
91:38:31:69:61:bb:e5:f7:af:dc:c7:7e:34:69:00:d3:83:f6:
86:a7:61:ba:42:83:de:da:97:51:37:74:aa:18:35:0f:68:fe:
c3:45:a7:aa:2d:1c:81:77:56:48:2a:18:be:0c:95:36:ec:40:
d7:53:ce:a7:7d:13:8c:ef:93:e9:c3:8f:3d:2c:c5:12:20:a2:
66:bc:7b:2d:0d:ed:ec:45:d4:73:6c:50:37:73:95:16:46:84:
df:fe:92:bd:55:dc:bb:b8:ff:f9:08:6b:17:73:d8:3d:fd:77:
03:8a:ad:92:3e:c6:4d:66:1d:a9:58:8b:1a:3f:74:6b:f7:b5:
19:e4:74:bb:f5:90:d1:cf:7e:2b:e3:8c:d8:a1:94:7b:ba:e6:
9e:38:18:93:cc:62:17:d7:76:ee:5b:b3:fb:6c:af:01:32:2c:
78:53:90:f3:6c:ed:89:c2:5f:9a:6c:1d:1a:04:ec:00:b9:36:
fe:b0:00:cf
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUF3IAcD1xmuxOvX9F7hRgd3R8+P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjcwMDAwMDBaFw0yNTAzMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGFmYTRlNDQ4NGY3ODU5MjY1YzQ2MzUwZWVkNDU1NzkyM2VjNmQwYTI3ODU1
OGZiMTU2NWQ3ODFkODNiNzFlNjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKYE9bodFQCF908YBSyQPF/MtRL7RWqEfQWqctiubDPexTWNWg/ZEbYEQ/9w
9uN90X/z6G545f4PNcWOhmMKK3aDg0j/fg2gQMoOYQW1PFkGrItbZjwehUqGaVtO
q56U5Bd74v3DuXcB9hMWi+EIucq4TmD1HAk1890asfPf8XEHE9NAB/NwTSo5vJtE
/hwBzguzbyL8demilJAokJ/ahQJt5UlzsoObehRGzmWxPDlwosWKpuAxeBBe7hfM
+pnYtpNtgKt9S3S2as3vZBGpDU8XP5irEQ6JXmYiXHa9E8b6CvmhlPZdjRfq1sJt
EnCLjMvnQ+orT/DrAed4TDhLFycCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTOxmS7
AOVuHpHVxgif/C87r96wyDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzVmYmFlNzYtMDY0Ni00M2U1LTgyNmYtMTE0YjQ5OTA1NDVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy4zqDAN
BgkqhkiG9w0BAQsFAAOCAQEAi7cV2ZiLaIlpHZyE20airQgDA9AB/NoprQU1Vg0b
8VdIbm+lx1nCxiNHMXocpKlsQsKx7cB2kupPYqNzHHp2xQfn5fGdwZkhkTgxaWG7
5fev3Md+NGkA04P2hqdhukKD3tqXUTd0qhg1D2j+w0Wnqi0cgXdWSCoYvgyVNuxA
11POp30TjO+T6cOPPSzFEiCiZrx7LQ3t7EXUc2xQN3OVFkaE3/6SvVXcu7j/+Qhr
F3PYPf13A4qtkj7GTWYdqViLGj90a/e1GeR0u/WQ0c9+K+OM2KGUe7rmnjgYk8xi
F9d27luz+2yvATIseFOQ82zticJfmmwdGgTsALk2/rAAzw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:58 2025 by rpki-client