Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
File: df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa (raw, json)
Hash identifier: EaGa5SjudoNNHVRedCUUpdv6H5GI8qwG67JKkSNY7/0=
Subject key identifier: FF:2E:9D:EC:D6:57:9D:74:F6:DD:AE:83:90:73:2B:40:75:F8:5D:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2AE13B5C2F1A11F6A4DD41EB9FCA91236176A02B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e1:3b:5c:2f:1a:11:f6:a4:dd:41:eb:9f:ca:91:23:61:76:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=45bc1eafecbd66ddb4db569ca30dde97fe12ca9444d2d5090250716472fbdd24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:15:99:58:5c:61:45:5a:14:16:8a:c3:d1:ef:
47:c7:7b:d7:6c:a6:c4:35:a3:d8:ca:c9:dd:ec:f8:
bd:7e:6e:81:7d:2e:cf:f6:23:6f:a0:79:68:f5:79:
d2:75:f4:be:d1:6d:03:9e:24:07:83:9a:7a:57:ab:
d7:f0:f3:e1:9f:c4:92:0b:0c:4b:e8:35:58:6a:e9:
ee:7c:66:ea:0a:f3:d9:7b:d4:21:6b:84:ac:11:5e:
96:49:11:91:f0:84:f7:a8:4e:43:2d:be:ba:fa:d7:
82:88:6c:80:2e:1e:e0:fc:73:28:a5:f9:32:83:9a:
88:7e:78:6c:a7:fa:3a:d0:e5:89:6b:77:ed:be:bd:
2a:7f:cf:10:62:ed:ca:f4:12:4f:fc:f4:09:ae:96:
4a:75:c6:70:7c:7b:ef:93:90:6f:94:f9:1b:dd:91:
08:fa:95:ae:0a:2a:f4:ac:61:a0:e7:eb:b9:62:d5:
6f:d1:57:7e:2f:0c:21:b0:a8:47:30:1a:b4:15:be:
38:84:32:63:f6:e1:bf:bc:80:19:65:04:09:ed:4a:
d0:b5:1b:4c:7c:dc:c4:c9:4b:60:13:d1:69:83:1f:
46:23:5e:54:00:66:4e:31:f8:32:22:85:12:c0:3c:
38:8b:74:7d:52:14:15:73:1d:4f:dc:94:dd:f4:8a:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:9D:EC:D6:57:9D:74:F6:DD:AE:83:90:73:2B:40:75:F8:5D:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e1:1a:21:31:32:ef:55:b4:99:74:31:26:fd:ae:27:a6:6f:
73:7e:55:f7:dc:ed:e8:88:4c:d2:6c:11:af:86:60:52:96:20:
b7:09:bc:7e:46:1e:0d:5f:17:dc:75:02:77:05:89:a4:12:7e:
f8:69:3a:c9:77:16:39:bd:fa:74:8d:77:40:36:b1:a9:b4:4e:
9b:93:cc:38:a9:fb:f1:84:21:43:f1:db:87:22:b1:4c:da:bb:
fa:e1:74:da:86:10:84:8a:d4:e8:40:53:e0:58:d6:59:7e:fc:
34:95:b6:e5:22:88:96:d5:49:c6:9a:1e:e7:52:52:2f:9d:b5:
df:96:ad:0a:cf:dc:2a:a2:dc:51:26:4e:b5:75:7f:f2:9b:fb:
1d:76:7e:91:57:f5:b7:4a:38:db:44:6c:2d:4e:23:12:2d:e0:
f2:4d:2f:cb:0c:f3:05:b4:89:55:34:ee:2f:e7:1b:65:e4:8a:
0f:cd:64:86:c2:a6:7e:0d:21:e8:11:79:d6:df:65:1a:db:c6:
44:97:cd:7d:b8:77:49:9a:cb:5c:25:c9:61:fe:7b:a4:b2:a1:
f6:96:a3:7d:8e:8e:24:1f:6f:11:97:7a:60:2e:79:1d:6c:21:
e9:bb:8d:83:21:ef:2c:7f:df:21:da:d7:a8:c2:02:7e:eb:9e:
c1:73:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:52 2025 by rpki-client