Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
File: b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa (raw, json)
Hash identifier: SCSEyhaVV8rdZsdmdsvJOQ/YC1AQnquDfmGMP46kHs0=
Subject key identifier: 54:BB:44:30:9F:D2:A7:BE:7C:48:15:DF:D5:46:1B:40:EE:09:16:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59CDE9E22BAC1D7FCE91F0B8586994820E52A948
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cd:e9:e2:2b:ac:1d:7f:ce:91:f0:b8:58:69:94:82:0e:52:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=d08d704c953908a18065e238b82bafca68c392ceae6a5eeb57755c9edf6b6de9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:a9:89:7d:46:63:41:56:27:8b:d8:40:48:
28:2c:c5:b4:eb:8d:95:4a:a4:38:5a:72:c5:53:6f:
05:2a:3d:1e:7f:38:7e:86:a4:e7:dc:20:d2:43:2b:
e6:0f:18:9a:76:3f:26:3a:8c:5d:40:da:26:cb:e1:
af:91:00:0c:9f:e4:80:bb:dd:d7:d2:cc:8d:94:a5:
c5:56:a7:ff:85:2e:88:5e:4b:cd:71:a7:0f:95:d3:
f2:c2:83:9c:6e:d2:ff:ed:07:d6:20:16:c2:08:39:
db:46:a0:6f:75:6a:f1:33:cb:2a:c8:b0:09:c2:a7:
a0:5d:3b:50:12:2e:ba:0a:0d:e6:88:d8:68:b9:79:
8e:bd:7f:1f:f5:86:f6:2c:ee:c8:6d:aa:bc:78:8d:
0d:4e:f3:c1:05:ff:11:da:0c:52:e3:3c:20:1b:77:
cd:5b:ed:3e:7d:3f:28:61:a9:68:28:ce:15:70:58:
e4:e4:f8:19:aa:e5:5d:37:50:34:ce:c9:a4:1e:f2:
c2:c2:bf:44:50:9e:16:00:9a:72:73:81:b4:fb:c5:
0e:e6:43:f8:e7:18:f7:9d:fa:47:60:6d:91:69:b1:
de:25:2d:2b:fb:49:a3:75:8e:16:50:42:1f:eb:e0:
90:d6:d8:57:60:29:12:55:fc:d9:fe:8c:56:57:4f:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:44:30:9F:D2:A7:BE:7C:48:15:DF:D5:46:1B:40:EE:09:16:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b0:99:67:88:97:66:0f:f0:a1:e6:ae:fa:a2:38:0f:ea:27:
15:1e:67:5a:d2:4f:71:be:b0:2b:3c:5e:38:74:96:d4:f7:5b:
30:e3:ee:2b:56:3f:cf:bf:15:69:96:12:06:45:58:77:f4:f4:
00:11:9f:02:3a:3a:39:76:c6:67:09:08:aa:d0:5d:71:32:1d:
58:d6:56:d2:28:39:6c:f1:c1:20:e5:01:c1:8d:cc:3e:a2:50:
db:1f:1a:d5:04:95:98:8e:40:3d:9e:4d:ce:af:9a:df:9b:5d:
6b:7a:d3:17:e0:ac:5a:69:61:f8:f9:f0:59:a6:de:42:40:2a:
98:0b:60:0b:e1:b3:11:b1:4c:cc:aa:21:4d:18:c9:f8:6a:b1:
e3:1d:55:92:f4:21:1c:b3:2e:14:a1:9e:1f:60:1b:f3:1f:22:
88:4f:b9:df:bd:8a:cb:6d:a1:f5:ce:24:a5:fd:30:c7:c2:08:
e6:a7:db:cf:9e:e3:e3:cb:52:9b:ef:e0:0d:16:39:99:96:67:
3c:e8:d5:23:09:ba:90:c6:37:46:87:30:ab:d5:ea:67:b9:a2:
31:f4:17:4b:3b:e9:6c:48:82:cb:ed:0b:09:c3:6c:89:ab:09:
03:ee:5d:30:ec:c0:8f:49:7e:8b:b7:97:08:90:0b:31:99:8e:
75:42:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:00:40 2025 by rpki-client