Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/968c7897-1d8d-4c3a-b38e-6602ae947f34.roa
File: 968c7897-1d8d-4c3a-b38e-6602ae947f34.roa (raw, json)
Hash identifier: +FrpIkRO61VOQcuUij/axenGG2DPRZQRXUCXdnpNDUI=
Subject key identifier: C2:03:50:34:A8:77:10:A2:A6:27:54:B8:C2:51:74:A7:D3:3F:A5:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44D61DDC301EA3E1BDD8948900F0A3E3EC246398
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/968c7897-1d8d-4c3a-b38e-6602ae947f34.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d6:1d:dc:30:1e:a3:e1:bd:d8:94:89:00:f0:a3:e3:ec:24:63:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=b17b6e7d5eedb3abbf0e188cbdda69c5f9d9ef04f656bac9a86543389c663f93, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:3f:9e:05:0f:bb:71:0f:1e:36:d7:12:5d:
b2:74:70:4b:5b:df:c7:b3:6b:40:a6:ae:fe:6d:a0:
5b:a5:ab:6d:54:27:48:48:88:c1:02:d6:1e:ca:06:
87:e1:77:45:e8:3a:97:64:aa:01:a3:f7:fb:c8:6b:
1b:d7:7d:d1:a2:af:6a:a2:72:9c:2b:b9:1a:f7:28:
3e:db:c6:c8:d7:7e:24:98:dd:f0:92:42:60:0c:fb:
50:cd:ce:bb:a4:1a:6a:0a:b3:af:15:5c:45:0f:fa:
b9:09:05:a8:37:b5:1f:7b:cb:bb:9d:ba:9a:ab:89:
78:22:3a:81:9d:76:65:52:e8:84:da:ec:e0:96:f0:
b3:f4:0b:aa:2a:de:6c:b5:b5:0b:00:f3:b7:de:f9:
8d:a0:53:78:ec:14:f7:30:64:3e:fa:0f:5f:27:42:
b5:11:6e:f0:c0:6a:33:75:85:23:e0:e6:f5:74:e3:
5d:a3:37:2e:f1:8a:be:b6:9a:75:22:d3:f3:90:c5:
90:df:a4:3a:01:4c:75:0c:3f:df:10:fc:11:c3:64:
bc:d1:12:6a:5e:73:80:77:ca:43:fe:6b:f7:67:0e:
73:05:73:75:28:15:12:4b:87:2d:a2:16:ef:d6:37:
4d:a5:a7:29:1e:c7:81:79:d4:ca:dd:a3:c2:ad:b2:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:03:50:34:A8:77:10:A2:A6:27:54:B8:C2:51:74:A7:D3:3F:A5:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/968c7897-1d8d-4c3a-b38e-6602ae947f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:5d:7f:78:66:21:a4:33:d1:17:24:6c:16:eb:b5:e0:7c:7b:
6a:93:a1:24:ba:30:c4:06:f9:72:3d:a8:50:f4:5a:35:e1:30:
ed:59:6e:73:bb:5a:78:2d:c4:8a:ee:cc:b2:ed:d3:1f:62:f1:
69:f4:9e:53:08:21:63:a0:00:3c:de:4f:50:f6:06:49:87:1b:
74:b7:3f:f5:9c:09:ee:2d:e6:13:3f:76:da:71:a9:dd:70:97:
94:04:ea:8b:ae:14:8e:bd:22:8e:dd:ae:e2:b0:9f:09:63:7a:
07:4f:d6:d8:55:fa:86:16:f9:e6:cb:ef:c9:26:a5:9a:66:dc:
90:46:f1:7a:be:22:7f:ed:0a:e3:3f:30:7f:e5:3c:df:63:18:
b9:53:60:ec:e2:4a:5f:b4:a2:8c:23:2e:cc:47:de:f8:79:f5:
71:71:7e:e6:da:a2:dd:c7:bd:13:3e:2e:dc:87:d2:32:3d:47:
0f:e1:4e:80:ce:53:90:51:31:3d:6a:a4:ea:62:07:b7:ae:d9:
92:1e:0e:2d:8d:6c:35:72:4a:90:eb:39:27:09:02:6a:1d:df:
b2:d5:ba:94:7b:d6:1a:e8:13:3f:af:be:2e:e7:7d:a7:95:d7:
f4:2f:12:b3:d3:48:92:30:6b:cc:d5:b8:67:f6:61:9f:b2:02:
3f:4d:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:43 2025 by rpki-client