Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa
File: b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa (raw, json)
Hash identifier: 5Lwu5GsOvv3tWb/hFJSjT0VOJCLSSGrYNx8YhgRT4nM=
Subject key identifier: CD:93:19:68:9F:D0:FA:A3:C9:35:4A:9D:C8:36:0C:E5:B2:3E:98:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71F796D4E3DB66FF38BE37DFE07D149A20B1AEDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f7:96:d4:e3:db:66:ff:38:be:37:df:e0:7d:14:9a:20:b1:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=9261bef91e77092dc116705330d000d595153f8943126b6c07b7b8094fa427e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:7d:3e:b7:7a:4e:5c:27:b6:a2:c6:5a:0c:
eb:26:a4:ab:e1:98:02:dd:15:d5:05:30:e9:96:84:
ce:f6:f4:ba:62:24:59:42:3f:2d:e4:cb:da:aa:d9:
23:de:f3:27:b3:95:9e:45:7b:49:4e:92:60:77:f8:
69:02:4f:d3:2f:d8:79:2a:ba:a3:fc:3b:69:5b:9c:
60:75:2f:73:78:2a:2f:ef:fe:57:01:fc:3a:ff:89:
c0:4a:24:10:d2:6e:46:6d:cf:ff:3d:f8:39:24:45:
80:a3:5b:54:1b:15:f5:be:e1:00:64:17:00:76:57:
6e:30:d7:5b:87:ee:a1:e4:f0:63:eb:59:1c:9e:50:
bd:41:09:b1:cd:81:6d:07:61:66:ca:a3:d0:e7:d7:
0f:79:60:88:44:9a:6e:fc:a4:0e:35:d9:a2:a8:cc:
0a:6c:92:3a:a8:3c:d3:b8:7a:65:50:09:3c:df:2a:
ff:88:68:d4:b9:cf:a9:42:c7:4d:c7:a6:0c:74:2b:
1c:65:11:56:a9:bf:45:71:c5:23:22:d7:96:93:c3:
7f:29:e7:ac:50:24:d3:db:20:b6:81:7d:4d:7f:8d:
59:b6:02:a4:f3:8f:b5:7e:92:6c:b1:73:ca:2d:13:
e9:44:24:79:58:96:61:2e:6d:e6:1f:98:36:31:9a:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:19:68:9F:D0:FA:A3:C9:35:4A:9D:C8:36:0C:E5:B2:3E:98:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:6e:de:08:b4:ad:e2:fc:24:bc:73:7d:04:60:36:57:60:7a:
d9:82:f0:e0:ea:42:07:27:37:21:1d:68:03:8f:3b:4f:fb:bf:
8a:6d:1b:eb:30:6d:61:3b:6a:6c:51:02:74:80:bf:e2:93:6b:
3f:5f:07:bd:92:b5:f6:3e:5e:2b:80:33:8d:d4:ab:88:fd:a3:
9f:09:b7:13:76:01:96:95:a5:28:f3:a9:14:8a:68:cc:a5:de:
ec:cd:7f:40:10:6f:2a:c2:a3:11:e7:c2:80:ba:48:ae:7c:d9:
32:ca:c7:fb:44:44:a7:f1:00:d5:4c:cb:d4:8a:0a:47:97:8e:
8f:50:55:51:57:dc:bc:ba:1d:fc:0c:4f:84:b7:7d:8f:d1:1f:
e2:2f:ed:1e:28:a0:60:9e:77:f9:ac:ae:ba:95:e8:91:63:f3:
a5:d9:3d:e2:5b:af:53:d9:1c:ec:f6:14:84:76:b4:95:1c:78:
3f:52:ec:e1:cf:26:8b:f9:30:a1:75:12:9c:51:f1:f0:f2:1f:
4d:ca:b3:ae:c9:25:42:53:40:29:01:ee:ff:2d:b5:54:ab:03:
ff:f8:63:66:78:af:d1:4a:a9:b8:78:da:7a:26:11:ce:07:02:
2f:fb:94:00:84:20:69:7c:2e:b3:24:b4:d0:3f:73:e5:f0:51:
1b:00:7a:1d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcfeW1OPbZv84vjff4H0UmiCxrt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjcwMDAwMDBaFw0yNTAzMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyNjFiZWY5MWU3NzA5MmRjMTE2NzA1MzMwZDAwMGQ1OTUxNTNmODk0MzEy
NmI2YzA3YjdiODA5NGZhNDI3ZTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJoLfT63ek5cJ7aixloM6yakq+GYAt0V1QUw6ZaEzvb0umIkWUI/LeTL2qrZ
I97zJ7OVnkV7SU6SYHf4aQJP0y/YeSq6o/w7aVucYHUvc3gqL+/+VwH8Ov+JwEok
ENJuRm3P/z34OSRFgKNbVBsV9b7hAGQXAHZXbjDXW4fuoeTwY+tZHJ5QvUEJsc2B
bQdhZsqj0OfXD3lgiESabvykDjXZoqjMCmySOqg807h6ZVAJPN8q/4ho1LnPqULH
TcemDHQrHGURVqm/RXHFIyLXlpPDfynnrFAk09sgtoF9TX+NWbYCpPOPtX6SbLFz
yi0T6UQkeViWYS5t5h+YNjGatLcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTNkxlo
n9D6o8k1Sp3INgzlsj6YIzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjczMGVlZjAtYmI5NC00ZDMxLWJmOWEtYzBmYjlhNDdiM2IxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy4zoDAN
BgkqhkiG9w0BAQsFAAOCAQEAj27eCLSt4vwkvHN9BGA2V2B62YLw4OpCByc3IR1o
A487T/u/im0b6zBtYTtqbFECdIC/4pNrP18HvZK19j5eK4AzjdSriP2jnwm3E3YB
lpWlKPOpFIpozKXe7M1/QBBvKsKjEefCgLpIrnzZMsrH+0REp/EA1UzL1IoKR5eO
j1BVUVfcvLod/AxPhLd9j9Ef4i/tHiigYJ53+ayuupXokWPzpdk94luvU9kc7PYU
hHa0lRx4P1Ls4c8mi/kwoXUSnFHx8PIfTcqzrsklQlNAKQHu/y21VKsD//hjZniv
0UqpuHjaeiYRzgcCL/uUAIQgaXwusyS00D9z5fBRGwB6HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:25 2025 by rpki-client