Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
File: b1697edb-eb6c-486d-a5cc-c22724b14f96.roa (raw, json)
Hash identifier: A/aAfnPZKjGiridgbdjkNkd6iQopmPD9mcEoWnjwjww=
Subject key identifier: FC:7A:4F:19:F0:C8:D0:6B:28:DE:65:06:67:BA:DB:4B:2F:45:41:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A581576C458C8266C94629585DBC5F4DFE1D49E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:58:15:76:c4:58:c8:26:6c:94:62:95:85:db:c5:f4:df:e1:d4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=10282ab9603dc46b69d8ffc478df02acf86c0c05ebe6d8d364908582b2731e8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:80:76:dc:4f:95:55:a4:30:de:e2:09:fd:d5:
c0:99:e5:a4:f8:d1:03:20:b9:5f:0c:06:39:25:c2:
95:89:93:05:98:80:63:c1:fd:9f:0a:41:ba:76:86:
d3:62:78:90:97:89:76:bc:ad:14:9b:b9:1d:d7:7c:
2a:70:c9:0d:2d:3a:b3:01:50:d4:3d:ff:c6:f5:2b:
51:6c:be:18:2b:e9:1b:56:5b:90:7b:10:e3:a4:ac:
dc:f6:93:fd:0a:39:3f:46:d3:77:a6:44:76:a7:04:
1b:1a:2d:f5:aa:5e:68:06:09:bf:e3:37:cd:1d:10:
93:ac:27:00:67:0f:f3:59:9e:58:e4:62:f8:4e:a8:
34:6d:bc:34:5f:97:b1:87:8c:42:49:a8:34:1d:83:
49:8d:ae:2c:8a:82:2a:dd:42:6a:d0:22:50:93:ac:
ce:38:6f:fa:e5:78:ec:c7:2b:c0:96:dc:c7:62:a7:
10:db:16:89:a0:84:d1:16:c6:23:96:4b:51:27:3a:
4f:30:16:af:85:02:b0:28:a1:bb:f1:76:9d:96:fa:
53:be:42:3c:01:ca:c5:ce:fb:28:cb:f6:6a:65:9b:
a3:ef:3f:23:75:9b:82:a0:6c:33:fe:3a:eb:a9:b5:
9c:9c:f0:02:ee:62:49:1e:3b:3a:ba:84:fb:1c:5d:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7A:4F:19:F0:C8:D0:6B:28:DE:65:06:67:BA:DB:4B:2F:45:41:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.170.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1d:6c:36:0a:af:19:20:ef:75:f3:31:4e:4e:64:c3:25:ef:
bb:07:df:6b:03:e0:c9:e6:d9:c3:2a:03:d7:9d:7c:e1:6f:80:
ae:a8:4d:c5:15:17:8c:20:0e:b2:a4:f3:8c:8f:3e:cf:16:ee:
2e:d0:21:13:d1:84:e6:92:b8:00:45:13:10:cf:58:bb:dc:28:
f8:92:a8:a4:3e:b7:57:eb:08:c9:62:8a:05:6a:e2:07:d6:cd:
fa:ca:df:78:d8:35:88:2d:7a:1e:39:72:95:96:ee:b0:3c:d6:
32:79:85:42:d2:e2:d8:a7:ef:a8:40:e2:1c:a5:79:ce:e9:1c:
bd:33:5a:bc:b9:f9:b8:bf:61:50:d8:98:92:d5:68:03:75:27:
b6:13:56:0e:08:97:5c:7c:a5:1f:41:5c:d3:4b:95:48:f8:95:
6c:53:d0:e9:14:07:53:a4:dd:e1:ef:a8:27:f1:54:d7:95:2c:
09:c0:e3:3c:71:45:83:a1:85:f4:14:d0:1e:3c:f4:ee:05:30:
65:b6:0c:19:86:55:5e:9b:c5:05:1e:bd:ed:71:d5:98:ec:25:
f1:8a:b6:a7:ad:36:f4:8b:6a:85:64:80:2f:a5:26:84:d7:30:
da:ab:d5:78:29:1f:58:4f:72:bb:d1:86:5f:5b:1f:34:0d:dd:
e4:b9:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:13 2025 by rpki-client