Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
File: bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa (raw, json)
Hash identifier: WzOW+REFoaPGRqHYMo+GvE56MX1nldfm4+W4Iov/EzE=
Subject key identifier: 02:C2:DE:E8:6B:C3:33:81:FA:46:F6:46:7A:4C:B4:6B:52:75:84:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ECA54FB655682F0CE91909BF8FE6F6D0F4438C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ca:54:fb:65:56:82:f0:ce:91:90:9b:f8:fe:6f:6d:0f:44:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=b61a9311f4512730bd1e21aa6324c30e0923933439c9c942efa77861681d0b13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:33:39:7e:d0:87:24:c6:b6:1c:9d:0a:bb:
ad:6f:f9:e9:a9:76:c7:f1:7d:a7:43:6b:55:4c:4c:
3b:18:bf:b6:07:af:3b:a5:d0:c2:eb:94:19:a2:0d:
ad:ea:69:39:da:6f:3f:80:ae:55:07:04:25:b8:b6:
1c:c5:bf:82:15:11:ac:d8:c6:ba:0b:20:4a:84:27:
e3:c1:c8:0a:6a:16:b0:8f:18:d5:e7:80:30:ed:6c:
64:0e:4d:34:4a:16:f0:fc:ec:9a:b9:d3:28:46:78:
7d:15:4a:e8:b2:31:31:5f:dc:3d:49:21:af:a8:e5:
6d:79:57:51:f1:1a:99:71:64:8e:fa:4c:68:ca:32:
28:2d:d0:3e:e0:4f:e0:22:a5:46:f3:78:ef:4a:6a:
20:a0:45:6a:a5:c1:e6:45:d7:9a:75:97:da:db:04:
54:b6:00:03:05:a6:39:58:ce:1b:3f:be:9c:ca:4f:
1e:d5:a5:fa:04:58:d5:11:08:ab:63:fa:76:60:bc:
20:05:de:a8:5e:d0:6a:10:18:46:b4:6b:ba:bc:24:
68:ca:e1:29:da:06:47:6b:b9:50:e7:0b:a4:ec:77:
51:71:83:2b:63:ae:a0:d1:18:86:3d:61:e3:81:cf:
9c:ac:64:65:51:aa:58:4f:6c:c4:ea:5f:37:e3:bb:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:DE:E8:6B:C3:33:81:FA:46:F6:46:7A:4C:B4:6B:52:75:84:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:6c:6f:5d:ca:b5:b4:32:5f:1b:ff:7a:84:f6:56:c0:86:e4:
a1:10:5b:c2:00:2b:af:7c:5b:ea:cb:12:57:e7:b6:14:c6:7e:
2f:29:d5:a9:d6:bb:22:6d:59:a5:46:e0:23:f8:01:83:88:4d:
2c:bd:04:c7:d5:cf:d4:9d:0b:fa:a1:9d:59:68:c2:6a:24:33:
02:b8:b8:e2:8d:c4:3d:6f:e1:4d:2c:64:26:b8:39:68:25:7a:
75:93:7a:3f:7d:7d:dc:20:a6:64:a9:9b:4b:04:e8:c4:77:b3:
d8:5c:89:db:9f:16:a3:9b:69:6b:f0:42:59:96:74:e2:1f:2a:
e5:6c:f8:c3:ba:45:55:d7:8d:0e:13:38:c8:08:f7:26:f4:2f:
29:aa:ad:5c:67:4b:55:01:12:5e:8b:0d:70:bc:b9:a7:7d:c0:
c1:19:db:e7:74:42:36:d6:10:8b:26:d6:33:c5:11:c8:f4:2a:
9e:16:b3:e3:61:d6:07:fb:6c:32:82:a0:5e:55:71:73:20:31:
5a:cd:9d:01:ae:3e:5a:86:02:50:86:7a:d3:13:d5:3f:be:69:
22:fd:07:ab:68:de:11:a5:53:a3:27:b2:e2:8e:c1:93:b6:f2:
e9:9b:02:fd:55:6e:b5:16:fe:a6:a5:ce:a6:12:09:d6:3a:4e:
82:dd:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:24 2025 by rpki-client