Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
File: 842bd74b-e507-47ea-bb4e-32057136b2bd.roa (raw, json)
Hash identifier: EO82CreS6kYPmpSEYf6CSH5rYfwteGSp0gpiSmSxSYE=
Subject key identifier: 4C:20:40:64:08:A7:F2:12:1A:D1:9A:E4:AD:14:F7:F9:68:F8:CF:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6180BA884DBF1D0DE5457315652E178213C750ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:80:ba:88:4d:bf:1d:0d:e5:45:73:15:65:2e:17:82:13:c7:50:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=4f28111d669f5af3a0a62ceb827e1f234ac1b79de3badf5e9cad52d0946aad06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:54:d6:7f:7b:49:98:02:af:4b:eb:4c:4c:
be:f1:4b:ff:9a:38:9d:48:b8:ae:ca:1b:fd:37:57:
32:b5:b3:05:93:33:de:11:6b:be:29:3e:b3:51:24:
03:bb:95:82:64:5c:b6:e3:0f:36:5f:39:22:4c:df:
c4:fc:22:cf:c6:b4:55:32:74:99:6e:b3:15:0e:36:
d0:8f:fd:e2:b2:02:f1:cb:4c:64:aa:94:5e:02:0e:
76:1b:6a:7c:81:b2:33:97:66:b3:63:76:cd:97:26:
64:c2:46:f0:0b:21:55:fa:c6:c4:51:2b:8f:ea:6a:
29:34:51:65:6e:66:a4:1f:7a:e7:23:1a:02:6e:f6:
f3:6e:9c:a3:a7:95:f4:54:1d:08:d8:7d:57:18:27:
a5:be:fa:d1:07:32:e5:fe:4b:22:4e:22:95:17:a1:
9e:77:df:ae:32:13:ef:5f:7f:2a:d7:65:63:c4:f3:
d3:c5:87:3c:a3:71:5a:22:02:75:49:e4:76:3e:b4:
61:16:c8:10:91:f2:c1:7b:6f:14:bc:e4:dd:36:64:
82:9a:8a:6b:49:87:76:0b:7d:53:e8:09:ec:a3:1d:
7a:dc:8f:42:0b:2a:d6:78:8f:3c:cd:f5:d0:2e:46:
e3:4b:a8:94:fd:29:ed:68:87:64:76:2d:d8:c6:12:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:20:40:64:08:A7:F2:12:1A:D1:9A:E4:AD:14:F7:F9:68:F8:CF:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/18
Signature Algorithm: sha256WithRSAEncryption
62:53:99:58:45:00:c6:80:f0:53:b2:2b:b7:f8:c0:68:07:f4:
17:d5:c1:18:71:cc:3a:3c:88:a9:d9:d7:eb:37:e5:87:19:15:
ad:a1:60:8a:58:c0:85:3f:5b:f7:98:5d:67:f4:68:57:db:a6:
61:5e:2d:18:30:ae:0b:49:b6:2e:55:45:36:3f:e6:33:d3:6d:
47:fb:db:f7:14:6e:24:96:ff:2a:d0:fb:f6:3d:60:b6:54:48:
bc:1e:e9:c0:59:b9:65:e6:7e:2b:19:1e:a2:61:54:8d:8a:cd:
28:ca:32:28:58:82:09:de:dc:9b:33:03:8e:51:74:0e:12:ea:
de:7a:36:13:ee:86:d5:2b:f9:10:74:e3:27:5d:61:5a:26:17:
f3:aa:2d:bd:de:72:3b:a5:8c:25:5f:b3:0d:2b:8f:d1:57:bd:
f1:c3:93:bc:59:00:3a:a2:80:ad:8b:98:e5:aa:b6:43:5e:b9:
30:36:74:e1:cc:d6:41:0f:74:f9:22:96:03:de:5f:8f:52:9f:
bc:22:aa:d7:3c:b0:9e:07:81:71:16:a5:47:8b:1f:ba:62:40:
60:7c:95:aa:9e:e6:91:fc:5f:14:d4:9e:59:86:4b:b7:6a:0c:
15:57:ec:b3:7d:95:c9:c9:ad:72:e9:17:24:4f:a0:22:cc:40:
ab:5c:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:03 2025 by rpki-client