Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: HtKil0gtPhmeUc8KOPbeDctiJjt6twI2W3FaUxrQXR0=
Subject key identifier: F7:CF:C8:E2:7C:DB:69:1C:BF:C3:1A:DD:5D:3C:3C:9A:4A:B5:F8:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14120A6AAAAFD6476F5D67051BC95AC22F5C6D34
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:12:0a:6a:aa:af:d6:47:6f:5d:67:05:1b:c9:5a:c2:2f:5c:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=4d6acb9bc04c23177696f676b3acb091c890d2cf308ee8e91975286bc4f2bec1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:24:59:85:8a:6c:f3:2e:db:47:1c:23:8e:
f4:4c:b9:a1:a8:b8:d7:4a:19:93:03:64:fd:fe:45:
bd:72:49:14:41:5c:28:57:00:fc:0c:a4:77:1d:51:
94:ab:6f:e0:8e:fc:bf:5d:90:f4:79:a1:ca:0d:ef:
22:23:55:30:4b:42:9e:c2:e3:05:c3:98:5f:3f:cd:
05:66:42:a9:d7:f4:4d:24:75:52:37:07:51:91:67:
19:f7:a3:bd:6b:b1:22:f9:a3:6d:74:5c:e2:a3:4a:
ce:46:be:93:82:0b:63:dc:c9:3f:24:45:18:5e:7e:
a5:1e:cd:31:47:af:9e:de:9d:1a:ad:0d:a8:90:e5:
b3:4a:09:2c:63:46:37:4a:55:14:e4:d0:c4:59:f2:
3c:e4:e5:32:05:14:0e:86:b3:35:37:a7:88:a9:78:
ac:39:0b:ff:ff:70:e3:a4:32:26:f7:65:9e:ea:23:
1d:af:b0:a1:4f:d9:ca:2d:2f:dd:ae:9f:98:3c:aa:
32:2b:cc:cc:13:33:ac:bf:a7:64:6b:18:a2:06:26:
f5:e6:15:57:2c:a0:65:00:b9:01:e4:bb:d9:36:e4:
d6:69:87:da:9a:4f:dd:c1:eb:69:e4:73:b6:05:b0:
80:a8:5b:55:e3:92:48:13:f2:3d:9c:3f:9d:5d:40:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:C8:E2:7C:DB:69:1C:BF:C3:1A:DD:5D:3C:3C:9A:4A:B5:F8:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
30:8a:5e:e4:a2:55:c9:a1:c7:f6:be:bc:6e:b7:ab:50:c2:19:
a0:cf:30:64:75:53:ae:1f:93:e8:b0:09:49:91:f2:d4:39:ae:
83:7b:a0:a1:98:b4:3b:c8:79:51:dd:87:5b:3b:cf:b1:04:76:
f3:10:b5:b8:1a:56:db:5a:a4:c5:82:9f:ec:66:33:e5:da:37:
07:6f:07:03:3c:4c:72:b6:8b:59:41:e3:f4:d9:af:56:5e:6a:
3f:30:18:96:97:7a:40:e7:35:94:42:1f:a8:8a:19:fa:9e:8a:
b1:fa:8e:cc:47:f5:09:20:f2:c4:a9:ad:91:b3:00:95:29:fc:
3c:88:f5:29:dd:9e:f4:c9:bd:88:fc:36:5d:dc:06:41:bc:d1:
72:93:74:e4:e3:b7:5a:4e:21:60:78:29:2d:6b:c3:e6:83:5f:
17:d4:29:32:ae:81:82:19:3d:b7:95:6b:b8:fa:f9:b7:83:c4:
c0:fb:81:56:25:fb:e4:02:1a:28:d4:20:6a:74:2e:69:a5:00:
8f:af:de:f7:c5:24:8d:34:5f:c6:f1:a0:fd:90:5d:97:59:92:
07:43:24:bb:7e:68:3d:2f:e2:b1:0f:6d:63:d6:37:f6:9f:30:
ea:3d:4b:4c:46:e7:1d:d8:fb:5f:d5:0a:b7:57:0a:4e:04:15:
16:85:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:06 2025 by rpki-client