Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
File: 9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa (raw, json)
Hash identifier: hoDoSAoqxTj/eCvXrtoNjBx7lqNFItL7sDrs+9X20Xk=
Subject key identifier: C1:87:75:83:A9:2A:D3:14:42:85:DA:7D:C8:2D:E4:9D:8C:B0:FC:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B0839F868309FA21EB6E04BACAECAFD95E5193F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:08:39:f8:68:30:9f:a2:1e:b6:e0:4b:ac:ae:ca:fd:95:e5:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=fe2b968379cf21f2f246856e6a4f32823a6c50a4ed4828f3f3871b784c7d8fea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:da:0c:38:f5:e4:52:d8:1f:71:6a:c1:7c:
00:27:db:15:a7:47:1f:ff:54:7c:5d:8f:dd:1e:f7:
ef:c9:65:71:51:e8:63:29:a1:2c:f5:8c:40:7f:c1:
d7:33:f3:79:c1:30:17:fc:4a:dd:47:d0:a0:5a:20:
39:92:b3:5f:03:76:65:14:b2:16:76:9a:33:ea:66:
9d:a3:39:4a:f8:74:59:d7:9e:e6:b6:43:25:4d:0a:
11:4b:92:7f:09:9c:6d:48:95:66:e5:2a:b5:66:a3:
3a:7a:70:d2:cc:1d:80:11:97:cd:73:ce:5a:25:ca:
70:ad:22:45:43:3a:cb:5d:41:c0:04:c8:8d:10:fb:
ef:32:e8:4a:aa:b2:d4:c6:11:5e:26:3b:b5:f8:5f:
4d:22:f4:80:77:cc:26:87:57:4b:19:34:40:75:5a:
a1:b5:69:ed:c1:43:d2:e6:60:d7:27:04:93:06:d7:
7a:83:41:5e:0e:ee:ee:5b:cc:f1:32:f0:5c:45:0e:
d0:aa:a4:28:28:e6:6a:73:4a:8e:c2:9d:ef:a1:82:
58:e0:c9:81:84:a7:aa:88:8d:98:09:34:c1:31:d1:
2e:73:d1:4a:e1:08:fe:55:9b:0e:7e:bb:c4:e7:be:
ee:cc:55:a3:90:02:80:c1:f2:53:26:d9:f8:52:80:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:75:83:A9:2A:D3:14:42:85:DA:7D:C8:2D:E4:9D:8C:B0:FC:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.216.0/22
Signature Algorithm: sha256WithRSAEncryption
15:2c:ff:aa:80:55:c1:2c:ff:30:54:c6:8a:4e:36:b3:58:e0:
13:b3:cd:84:ab:44:32:62:11:85:df:6e:f3:15:b6:d5:a8:5a:
52:a7:53:ef:d1:04:3d:bf:46:4d:b0:6e:aa:ee:e7:0f:4c:46:
88:81:ec:22:91:52:a3:c1:1a:19:66:a7:bf:01:08:81:46:a1:
08:da:47:0b:61:6c:46:63:76:c6:9e:87:14:8f:e9:45:86:68:
68:7d:9b:07:92:ab:65:9f:50:f0:84:be:18:1a:c9:80:c6:92:
b6:dc:8a:b8:07:e2:4b:46:59:d8:ce:5f:5d:44:cd:a2:94:32:
91:23:26:52:20:ad:ff:99:9d:4b:16:96:54:0f:a9:d0:f3:7c:
56:1b:1e:1c:73:8a:1b:83:cb:20:dc:de:2c:1b:aa:2f:c9:b3:
17:fb:ad:33:cb:13:c1:df:92:52:05:e1:1e:4d:04:a5:7a:fb:
82:d7:e5:1b:50:94:7d:4b:0f:d2:18:60:0c:98:8f:ab:1e:23:
28:f2:ab:b4:86:01:71:a5:f8:12:8b:39:88:72:eb:02:d6:2f:
a9:55:07:f4:aa:58:4d:f8:ef:57:4e:42:14:71:5e:c2:e6:ff:
81:38:fe:16:36:a0:ef:8b:5b:71:29:29:20:27:d3:9d:70:f0:
c6:2d:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:51 2025 by rpki-client