Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
File: 4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa (raw, json)
Hash identifier: 9pnqKiahkfc3Hy0dv/bPumKD4UVx+mjQceyeIDRJecI=
Subject key identifier: 0A:4B:C3:D9:EC:F9:09:B5:AC:5F:22:93:95:82:6D:09:49:7E:CD:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67E4BAA05655E24F1FA1891ECEA2F60D7BB203A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e4:ba:a0:56:55:e2:4f:1f:a1:89:1e:ce:a2:f6:0d:7b:b2:03:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=7274562754c87fb6d54a32e6a5825397e9d2b28ddc1cf4884f7dd7631e917b57, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:8f:5f:8b:cc:49:a5:89:39:a1:49:9c:3f:
cb:89:16:74:78:e9:b8:17:de:e0:e5:9c:9c:e6:96:
60:8f:15:b5:c1:44:bb:33:66:8d:b5:92:c0:c1:9a:
09:9c:01:be:8f:56:fc:8a:fd:5b:1e:b7:fa:6e:fe:
f8:ea:ae:8b:81:0d:33:b8:80:83:4f:b2:c1:31:24:
40:ef:c5:13:82:85:0c:3c:27:0e:49:47:4b:a5:ae:
c1:2a:ab:03:eb:3b:cf:9d:da:41:da:a0:78:ec:62:
75:7c:83:df:55:16:e9:ee:4b:dd:9c:0f:fc:ac:71:
6e:fb:b3:ea:3e:21:1d:71:4e:0c:f0:aa:68:5f:c7:
97:76:99:17:c1:1f:dd:3d:93:76:2b:3a:a5:af:87:
a4:f1:c4:87:e0:cb:f5:63:e0:d9:0f:09:2d:55:ee:
a0:02:27:6c:56:fe:55:64:82:62:98:26:57:3b:b1:
4d:d1:66:70:23:d5:f7:c9:9b:ca:44:75:b4:a4:f0:
34:65:71:e9:c8:d4:08:a5:59:ea:be:37:6c:da:a5:
66:ce:cb:d6:3f:d4:89:e4:72:20:26:50:51:b2:d0:
8e:88:2e:70:f4:c1:c3:67:82:6c:a8:8c:23:8e:e3:
e2:c5:d5:e8:f2:5c:a3:ea:de:cb:c9:14:6d:af:76:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4B:C3:D9:EC:F9:09:B5:AC:5F:22:93:95:82:6D:09:49:7E:CD:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:de:39:8e:75:ee:9c:e8:eb:b6:37:40:b3:ba:3a:13:aa:a9:
8c:4d:6f:97:b3:78:29:c8:b1:88:0e:c2:88:d6:94:83:d8:52:
b5:fd:3f:45:e5:80:18:4f:b0:88:32:11:3f:f0:bc:37:e1:40:
03:b3:b6:21:6a:6e:e5:99:fc:2e:28:81:33:bf:d7:24:0e:e0:
f1:8b:95:3b:4b:4e:80:d2:ba:81:7e:ef:27:e5:c1:f7:01:f7:
31:4b:c5:d4:1f:79:68:09:83:1c:ca:38:7d:56:54:2a:df:03:
6d:ba:59:ea:ef:9c:d2:61:c3:66:a3:23:c1:fe:3c:f3:fd:71:
2a:e5:dc:d8:47:64:7e:16:69:b9:53:e1:14:e1:be:b2:55:7e:
3b:b8:10:38:93:75:0f:99:68:5a:4e:a7:60:b7:b3:f3:3c:8f:
7a:a3:0a:b9:96:5e:1a:f5:23:58:ff:19:18:d9:57:55:2c:6f:
6b:70:bb:e4:ba:a9:d3:8e:5e:2e:97:47:3f:f1:48:bc:dd:2e:
e5:93:ee:2d:e2:89:44:2b:94:75:33:67:3a:49:e9:93:45:a4:
7d:1b:ce:0b:31:f8:f5:d7:53:b0:9a:53:b5:2f:23:24:e3:04:
2b:8d:ab:2f:01:c6:21:24:e8:9d:6c:c0:58:7c:c6:63:28:4c:
ce:b9:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:07 2025 by rpki-client