Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
File: 6e1e6e69-6595-40ff-9430-d53f22670630.roa (raw, json)
Hash identifier: MIQAbMbPCyu8uzbKZyC9Iw8zBi3dQGLLxbqr13P58+Q=
Subject key identifier: D7:F6:70:AA:DD:12:D3:44:7B:8B:3E:25:62:C0:BB:88:03:E2:70:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40135CE1BE9C380830E1FE7C039C7B5ED8107E5F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:13:5c:e1:be:9c:38:08:30:e1:fe:7c:03:9c:7b:5e:d8:10:7e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=ef687f4f29f3d87358f1eaf2100e3803399eb758eb0376d06d1a48034ed27960, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:43:9d:73:ae:a5:dc:29:a0:c6:cf:33:02:
cc:86:a3:a3:a6:5e:6e:9b:47:3f:4a:4e:ac:ed:59:
d5:8a:d6:1a:cf:96:06:16:0e:29:f5:77:58:6c:fc:
51:c5:8a:be:57:c7:d5:10:97:b0:0d:8e:81:35:ff:
f0:59:8d:83:23:d3:b1:cb:c6:48:51:b2:d8:92:4f:
0c:1e:a1:fa:d8:15:ee:01:22:5d:75:1d:e8:44:62:
48:74:82:73:9a:46:99:c5:8e:97:bc:23:f9:7c:11:
ce:80:58:0c:af:54:63:bd:3d:cd:0e:e5:85:43:b7:
9b:0d:f0:9f:62:4e:f7:94:7b:2e:06:2a:7a:f7:14:
d6:b9:a1:3d:4e:03:fe:e4:1e:9c:05:6b:c4:ad:17:
90:95:94:e7:99:5f:5a:8e:e6:02:9d:17:7f:d1:3b:
87:20:04:c9:35:6f:79:06:04:41:3f:3e:2a:8a:0c:
1f:d9:bb:f4:04:94:c8:c4:8a:08:ba:db:2d:61:84:
e5:85:26:7a:9e:ec:7d:63:af:73:55:da:9b:95:4d:
a8:43:11:db:39:a9:23:08:44:57:24:2d:85:f9:5a:
d0:27:d9:ee:d3:73:ad:c3:e4:f3:03:82:d3:78:5b:
73:00:be:1a:c9:59:20:2a:01:b4:dc:da:9d:f7:6f:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:70:AA:DD:12:D3:44:7B:8B:3E:25:62:C0:BB:88:03:E2:70:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:b9:f4:e5:0f:e5:e1:27:07:89:77:5d:ec:1d:e2:94:3f:2d:
69:99:44:b6:f6:40:1f:22:14:09:0c:a3:cc:02:b3:3c:ab:4a:
e9:f6:0d:2d:ff:50:50:4c:aa:3b:7f:d9:79:bf:1e:2e:ad:7d:
ab:47:23:b4:f3:2a:55:17:53:de:7b:67:b2:70:15:2b:6e:0d:
95:73:ae:59:b8:a1:6c:c5:ca:2f:68:50:85:94:d3:5c:17:9b:
e1:43:03:4a:e9:70:ec:43:f3:5f:00:39:28:59:76:cc:75:e5:
05:fa:1b:be:df:bc:d9:de:73:79:e5:38:db:0f:57:c6:a2:c3:
91:95:b1:17:bc:1f:21:f0:08:08:30:23:bc:57:e7:28:b4:9f:
2a:d7:60:86:11:7a:7e:58:0c:07:1d:60:15:4e:2c:2e:34:97:
50:72:68:f0:07:0c:54:94:7f:5c:3d:99:d1:6b:2d:5e:d0:25:
6c:14:08:2f:b0:98:fe:32:ea:72:c7:3f:15:dc:ed:9a:b9:17:
a4:22:5c:93:98:f8:be:24:d4:e2:56:4a:5c:50:c1:be:6d:1b:
8d:fb:23:c0:d4:b4:3b:0b:b2:a3:9f:7d:48:fc:06:83:2d:e9:
32:12:a6:99:09:b9:27:71:cf:35:f9:f1:ed:f1:69:35:c7:1b:
f2:f3:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:34 2025 by rpki-client