Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
File: d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa (raw, json)
Hash identifier: fgGOE7WMAE8JgxIyKS1woFDJuo/Cy1IT5C1/924Iu5k=
Subject key identifier: 97:50:C4:80:BE:1B:15:C6:B4:18:62:2E:3F:43:28:49:E7:35:8B:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1184560E66A8AC4AA36CADFCCD1DC6F43573FB62
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:84:56:0e:66:a8:ac:4a:a3:6c:ad:fc:cd:1d:c6:f4:35:73:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=4efd5091d2abeb1e4c7c0bd849b29ed56e2f9eee0243aef24dcc8200a3a74f2a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:12:12:8a:64:bd:b7:57:55:15:3c:14:c0:
10:7c:ec:b9:f9:49:8d:28:29:22:45:d4:28:91:97:
a5:f0:a7:08:1b:64:95:62:2e:f4:d3:9c:8c:da:f4:
ba:0e:81:72:d3:d4:49:03:c3:0f:9e:ff:d1:86:f6:
39:65:81:57:21:e9:b7:ee:a6:56:40:44:01:94:2d:
f1:d1:6c:5a:de:0a:a6:4b:aa:7a:6f:dd:d4:4e:48:
0a:f3:c1:ef:04:92:49:02:3b:8f:43:4f:86:fa:9d:
46:87:ff:53:a6:d3:47:f2:d6:96:b8:13:91:1f:46:
ac:cb:d2:33:5e:53:1f:cb:3e:75:66:ff:9e:97:08:
34:53:a2:0e:56:dc:a8:16:25:c4:bc:9b:58:7f:0c:
bd:15:8f:9a:64:6b:0f:d5:d3:c9:c5:96:22:25:23:
7d:72:96:99:b6:32:21:ec:e4:5f:fb:0d:b9:9c:ff:
4c:cd:1e:d2:9b:91:dd:04:d2:05:b7:9a:f9:aa:6b:
a5:a2:dc:56:3c:17:b7:e8:1b:fd:e1:55:c2:99:45:
cf:d4:aa:83:15:f3:78:4c:64:33:20:34:e8:b3:42:
6e:44:40:23:17:cc:b5:a9:b6:64:00:b6:c4:d2:19:
f9:f0:73:54:03:6e:3d:f8:4c:2c:bb:85:a2:94:db:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:C4:80:BE:1B:15:C6:B4:18:62:2E:3F:43:28:49:E7:35:8B:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/20
Signature Algorithm: sha256WithRSAEncryption
81:09:41:e6:48:1f:5f:9c:87:00:9e:5b:f9:d4:69:3e:7d:cd:
3e:9a:bd:b2:15:15:5a:6d:b0:8c:cc:56:67:a1:70:11:49:9b:
45:91:fd:3d:3a:fb:8f:fa:18:07:c3:66:09:97:5b:9a:e7:f4:
1c:f9:36:33:03:3e:20:08:51:8a:f3:81:bd:61:20:af:23:06:
41:4d:a2:00:92:4c:07:0f:fb:63:ca:c0:9e:19:38:29:7b:f2:
1b:d8:bc:b0:52:57:64:ad:cd:03:5a:3a:9b:77:a7:9b:5f:6b:
fc:fd:4f:c7:9c:e9:cb:40:81:f5:0c:3b:22:d8:b9:6c:b0:ee:
71:c5:ba:d2:76:84:4e:b5:9a:5c:90:c6:15:d2:d3:84:66:67:
de:80:49:c6:b4:17:fc:1d:a5:5f:4e:4d:52:12:e1:22:b8:da:
11:dc:0b:98:8c:49:a6:40:46:1d:2b:78:7a:bf:04:95:11:c1:
a3:a8:c2:ed:51:dc:51:a1:57:5e:3a:f0:1f:57:b9:27:8a:84:
c4:9b:72:11:f1:d2:1f:79:16:35:43:b8:6d:5f:da:3e:4c:37:
42:e9:69:89:62:c5:7f:04:03:dc:63:a8:00:7e:8e:b5:e7:d3:
a3:95:4b:d3:5f:e3:a8:0d:a3:a7:72:1c:1a:93:70:f6:26:a6:
86:b5:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:07 2025 by rpki-client