Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
File: e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa (raw, json)
Hash identifier: /7xoG/oCngloH/nIZ0efQFHTgZl75lNBkNWrHXRfDqk=
Subject key identifier: 0E:7D:89:91:53:6A:59:C0:10:5B:22:14:B8:3A:7D:5C:DF:26:7B:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61753261B6F845B35E3DCE2BAED2B41177D467E9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:75:32:61:b6:f8:45:b3:5e:3d:ce:2b:ae:d2:b4:11:77:d4:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=5928696dbf8e2713967f351cc7a4cd0d01257ff7677a1acb0881ed66598073bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:76:0b:62:ed:ba:c5:61:f9:8f:4b:e4:5f:
02:b9:3e:d9:bf:22:2a:db:41:53:d1:8b:f8:7d:c8:
d0:ba:ba:7a:1a:b8:a4:ad:ba:03:e3:72:48:bd:b2:
87:fe:a9:ee:5b:99:67:d0:29:91:47:22:c6:7a:ce:
12:8e:10:15:c5:31:c4:b2:c2:ed:ed:8f:69:86:3a:
31:17:cc:c6:f8:b8:06:47:4c:72:24:71:a7:8e:f2:
ce:50:fd:74:48:4b:6b:76:67:ec:85:12:54:7b:ee:
a7:ea:05:67:db:e6:c2:5d:94:71:27:c4:04:5f:92:
ff:6c:f9:5f:a2:26:5c:72:06:b5:f8:7c:1e:cc:cf:
a6:29:2e:d2:9a:70:5e:29:e9:46:67:8c:96:66:af:
ab:65:ed:49:52:bc:d7:e7:aa:6f:92:85:82:da:1d:
0f:0a:06:a2:11:40:60:a1:f5:dd:b8:54:3e:d5:bc:
62:92:56:24:07:fe:09:e4:29:9e:cc:cd:a2:e5:91:
06:d9:79:31:10:f3:19:80:03:8a:99:31:f1:18:f1:
19:16:e4:bd:66:0e:01:23:ea:57:2d:26:01:6a:1d:
02:5a:a6:38:5d:15:46:07:38:ff:f4:07:14:65:52:
a7:cb:d9:c8:27:e6:b1:c7:19:90:7f:96:63:6d:58:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:89:91:53:6A:59:C0:10:5B:22:14:B8:3A:7D:5C:DF:26:7B:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.160.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:bd:d9:36:4e:d1:d1:ea:d1:c2:ce:b6:e6:ed:ef:dc:c9:1d:
78:c2:ad:44:4b:fe:4b:af:3e:92:1a:80:e5:a6:50:07:6f:25:
6a:04:94:b7:d8:e9:5b:7b:72:fd:dd:c3:55:7e:4d:27:43:42:
72:9b:01:ba:28:4e:56:da:9e:c9:09:52:ec:d4:28:a2:b7:be:
9c:07:3d:be:0c:c9:29:73:da:51:05:a6:22:47:9d:98:6a:92:
85:ac:93:41:58:d6:54:e6:de:e9:b0:4c:ec:c2:a0:e3:f0:b5:
4c:cc:d3:44:ea:59:c2:34:89:41:51:9f:ca:53:5e:c7:ec:3d:
b4:0c:24:17:db:db:c2:15:8b:a3:ba:57:00:50:0a:88:8e:9e:
50:86:e0:fa:6e:24:42:91:79:eb:8d:17:2c:9f:0d:f8:ec:25:
0d:a0:45:c5:f8:42:0b:bd:18:d3:82:2c:e8:ff:e0:a7:93:af:
6d:11:3a:a0:3f:48:95:78:bc:5e:ef:04:5d:d3:61:2d:d3:6a:
ab:c3:45:63:c8:12:ce:7d:ab:be:ab:99:e0:e3:38:63:01:4a:
c1:99:71:0b:f4:2c:93:8d:d5:20:cf:5c:92:4b:9e:14:47:54:
e8:0d:e8:3a:e1:4b:c3:89:11:db:8b:a3:52:94:8c:f2:8a:10:
09:08:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:52 2025 by rpki-client