Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
File: b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa (raw, json)
Hash identifier: Gj9Maqrsad4op8G85soNsDhHNNJr6K/lBEnb/pLtUrY=
Subject key identifier: 48:C2:0D:F3:93:7C:DD:20:DF:23:1B:9F:3B:4B:54:3A:A4:24:4F:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50129A2D5679F8C8A8E8D983AF11C7B511508ED9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:12:9a:2d:56:79:f8:c8:a8:e8:d9:83:af:11:c7:b5:11:50:8e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=18aee6df5c3c1f0c2d1dd3f218e95152aca3002a21f2fcac584d715160709c7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:74:54:1a:4a:e2:4d:2e:88:da:f4:84:09:
02:8d:3a:d4:53:58:08:c1:ba:57:4c:88:e8:d9:a9:
4c:43:41:31:8c:a0:04:e7:01:c9:44:2f:18:7c:5f:
7c:80:66:32:e3:d7:00:cf:5c:0a:c4:dc:1e:84:7e:
f7:b6:c6:27:4f:58:ff:91:fb:bf:e9:38:81:8b:44:
90:fe:f8:de:9d:2a:34:88:c6:4a:74:96:96:5b:6f:
79:f0:f0:7b:09:e0:30:3f:0d:84:d8:72:bd:c4:d4:
de:4a:82:5b:46:ac:f9:cc:77:5d:97:0e:7c:b1:73:
a0:76:f4:75:1e:77:03:21:89:30:68:d1:18:52:2a:
81:26:93:9e:d8:90:97:c8:26:eb:1d:86:6f:c0:01:
b0:64:5b:51:ba:0d:2f:de:f3:12:8f:8f:74:1c:a5:
04:62:44:52:15:2b:16:86:4c:75:f7:ad:fc:97:08:
65:ae:99:e7:a6:a7:fe:d5:63:aa:44:2b:cc:89:02:
76:54:81:6e:f7:a8:10:d8:16:6c:54:bc:bc:c6:6f:
18:e2:63:09:4c:47:d2:11:a5:78:86:57:a8:69:a3:
0d:db:00:1e:2f:ee:5c:72:80:19:65:1c:66:79:c3:
65:be:ef:5f:9f:7e:58:31:a3:91:6a:91:2b:fb:49:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:0D:F3:93:7C:DD:20:DF:23:1B:9F:3B:4B:54:3A:A4:24:4F:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.240.0/20
Signature Algorithm: sha256WithRSAEncryption
85:3b:ec:2f:a2:ee:e1:96:0a:1c:90:75:2d:99:39:42:a1:63:
cd:d6:d6:15:35:15:d4:94:93:5a:bd:c8:ec:da:cf:7b:6e:b2:
83:c7:96:d3:97:2e:79:f1:6d:8c:1b:30:aa:b9:38:d4:b1:df:
9f:26:ba:4a:fc:ca:b4:84:1b:fc:66:bd:bc:cb:a7:6f:7d:8b:
1f:4b:71:97:35:9a:74:dc:5c:2e:f6:98:b7:55:dc:38:5c:7d:
4c:5f:3e:e2:ad:33:d9:2e:0f:dd:4b:7a:b1:16:18:eb:ce:12:
fd:75:91:63:fd:e2:46:12:4c:56:60:11:71:2b:87:0f:4e:22:
73:98:96:de:5b:ad:5a:0f:38:8b:a0:ec:2d:d1:75:13:f8:6d:
19:97:b6:21:aa:1e:c0:b5:6c:28:59:18:b6:90:02:e8:3f:d1:
a8:17:f2:c1:7a:d9:88:d7:0b:fe:60:43:66:20:5d:a7:0e:a4:
62:3b:eb:fb:ec:ef:ba:d4:91:1c:38:bc:78:23:ae:b8:99:c8:
6e:f8:aa:24:44:4c:56:92:49:57:29:9a:45:8a:7f:6c:22:bc:
21:95:7a:90:15:9e:a2:05:0c:92:eb:95:68:29:88:58:af:00:
b1:61:a7:68:94:e1:21:71:d3:29:bb:de:8d:79:df:c6:8d:7b:
41:72:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:08 2025 by rpki-client