Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
File: 9c3be55c-de0f-4901-938e-229a296fa31f.roa (raw, json)
Hash identifier: wDqs/9Gdg1JBX6ilkYpvvfJK2L1QovP6EfPl/UH+Nk8=
Subject key identifier: AA:40:29:37:54:2B:F3:AE:E2:CD:A6:9A:15:01:EB:3A:6C:D8:7B:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08470F410999F37812B4068CE7EE6FA47F32710B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:47:0f:41:09:99:f3:78:12:b4:06:8c:e7:ee:6f:a4:7f:32:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=9176f5cab7648c72685e169b1fa7100f5350a12b50530bfe3f9fd84be3b3b675, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:80:7e:17:1b:19:30:de:8f:33:5a:a8:4f:
ed:dc:30:96:90:b3:8e:b1:5a:bc:22:8b:35:35:71:
a6:94:ca:31:b7:75:a7:bd:48:3e:3b:dd:e5:c5:a1:
73:3d:d0:b8:0a:d8:17:79:8a:26:22:d3:0e:6f:90:
4d:fb:9f:ca:94:66:a8:cd:d5:55:ea:a5:7b:50:d4:
cf:b4:75:fe:55:bc:45:2a:29:9c:0f:73:af:13:37:
5b:d0:69:b2:ba:20:36:56:23:c5:59:3b:e9:4d:86:
02:62:e6:ad:02:57:d9:7b:c5:bc:db:32:cd:73:7b:
68:97:dd:95:40:ec:a7:a5:ba:6d:9f:10:14:e1:05:
53:2b:96:d9:b2:b8:1d:23:c4:9e:7a:78:b3:ef:c8:
8a:73:11:90:24:35:94:87:5c:c2:29:2c:e2:c1:42:
8a:6b:f2:f2:84:33:92:b6:f3:ce:ec:99:37:b2:d8:
53:dc:ef:c0:66:1d:a7:7f:17:74:63:c7:8e:94:99:
28:f5:16:1b:46:5d:25:54:75:f1:0f:d0:bc:ac:a1:
11:05:53:ab:61:b6:b1:1f:5a:12:ae:9a:16:b9:f7:
d7:53:bc:da:91:c9:92:76:1b:2b:7d:98:6e:40:65:
c5:7d:17:f8:df:02:3f:5b:95:45:8b:b4:b2:49:79:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:29:37:54:2B:F3:AE:E2:CD:A6:9A:15:01:EB:3A:6C:D8:7B:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.168.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f3:f5:fd:38:9c:a6:f7:0f:59:a4:9d:68:da:6a:eb:03:76:
bf:eb:3d:20:13:dc:63:1f:78:7d:7c:eb:ff:9a:ce:43:a5:44:
54:a5:80:12:12:7d:fd:ed:8b:5d:0c:7c:ce:e6:6a:d4:94:b1:
13:2b:e5:a0:fc:7c:db:fc:ae:88:5d:56:f8:a5:0c:b7:bc:61:
dd:10:8e:fc:7f:90:38:d9:95:86:02:df:79:5e:f4:9d:ee:c0:
95:c7:66:dd:8b:2a:68:0f:17:87:e7:6d:42:02:7a:e3:aa:38:
8c:77:40:f7:f2:6c:6d:a9:44:62:b6:bc:d1:cc:4d:c9:cd:e2:
3b:ff:66:81:59:71:63:91:ee:ad:93:b7:b3:4e:fc:d4:4d:c5:
b2:ba:03:71:a1:34:34:b6:1c:dc:81:63:57:c1:29:55:45:5d:
83:e9:16:17:88:22:38:b1:73:0d:ec:5b:71:fe:34:88:b5:ef:
1e:e3:5a:c6:41:87:41:76:2c:51:d3:46:33:cf:44:da:50:57:
2f:10:c3:2c:da:0d:dd:4e:67:28:2b:a6:1d:7b:03:e7:4b:88:
25:25:3b:22:78:b8:57:60:d0:5c:e9:c1:7a:19:53:3d:0b:a8:
ac:eb:f7:3f:06:b1:18:9f:19:0d:fe:6b:a7:98:bf:32:8f:ab:
d7:aa:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:06:19 2025 by rpki-client