Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
File: 11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa (raw, json)
Hash identifier: KnjUldA84T88EWkHId2PRVTdhSwUu2i1bu45HphAL2s=
Subject key identifier: 49:BB:BE:88:4B:ED:85:CD:DA:E1:0D:5B:20:37:15:94:86:27:E4:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BEC0AE7FDC24E5BC96DA2F32C69FAA77CB3A3A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
Signing time: Tue 18 Mar 2025 17:01:16 +0000
ROA not before: Tue 18 Mar 2025 17:01:16 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ec:0a:e7:fd:c2:4e:5b:c9:6d:a2:f3:2c:69:fa:a7:7c:b3:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:01:16 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:d6:70:3c:b6:b4:9d:06:56:b7:45:08:7e:
f1:51:46:54:24:2c:62:80:40:93:3f:b9:fe:85:d1:
7e:bd:ad:67:87:5e:22:12:d2:8d:4e:ee:cc:3a:5b:
d0:e4:23:46:c6:3c:9a:54:42:c3:77:8c:f4:9c:10:
ee:8f:ea:bc:7c:8a:24:8e:f1:c7:d7:8b:e0:8f:21:
ab:b0:92:a3:bd:81:6d:f9:26:7f:32:0c:8b:4a:84:
59:5b:75:0c:af:23:27:b0:82:c7:33:27:80:e5:97:
ed:53:85:a6:d9:3e:fe:ef:be:1e:17:89:f9:c3:e9:
b3:11:23:89:6c:7a:ce:ce:f6:3d:6a:fa:48:bf:26:
17:23:fd:d8:6b:d6:40:49:82:59:56:b6:c0:4e:77:
b4:c4:72:60:5a:dd:72:ec:8a:c0:94:67:06:6f:c6:
c8:5b:54:8a:fd:f0:78:3f:31:2e:7b:93:5e:18:8f:
ca:a5:df:37:b8:cb:51:2b:dd:77:6b:36:5d:31:bb:
19:de:f8:a4:1b:3f:59:25:fe:b5:25:0b:f1:b1:c1:
d8:af:74:54:65:c0:40:0a:45:47:54:43:d1:4a:e3:
8e:94:47:f1:3a:db:6a:6d:ca:be:e8:cf:1e:19:68:
46:88:00:8f:a5:00:d9:ee:b1:03:65:32:a6:e3:92:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:BE:88:4B:ED:85:CD:DA:E1:0D:5B:20:37:15:94:86:27:E4:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.64.0/21
Signature Algorithm: sha256WithRSAEncryption
12:11:34:42:2c:55:94:f7:51:10:29:9b:3c:4e:cd:eb:25:3b:
6e:57:b9:6a:5b:8d:0a:27:cd:34:5b:f7:7c:05:9f:40:d3:d7:
83:13:ee:07:08:3c:91:14:5e:ff:5b:94:57:77:02:41:f0:a8:
ca:f5:d1:f2:c0:d6:74:25:58:10:92:7f:02:18:6f:67:16:15:
c7:43:26:d6:17:11:12:84:68:fd:14:21:90:d9:0d:4f:24:d4:
01:f7:52:d8:af:29:41:a6:33:71:c5:4e:d9:54:c1:73:99:29:
13:75:8d:2f:dd:fa:f0:05:96:b7:04:95:8b:ac:06:68:5c:bf:
85:4c:27:50:c5:3a:cb:5d:e5:ec:9a:87:43:cb:47:ad:e1:18:
bf:cc:f4:0f:27:ea:d1:45:38:5e:24:b5:6c:a4:e8:97:96:c5:
65:fd:31:ce:42:2c:41:45:04:77:0e:97:14:fd:9a:94:04:e3:
50:81:a9:7c:22:d0:9d:53:77:a4:95:a8:33:16:71:bd:9c:0b:
ea:57:40:de:66:92:aa:13:37:12:f2:eb:63:97:d9:8e:4b:cf:
cc:b6:a7:a9:29:a0:72:31:3b:51:be:e8:65:c4:76:7f:aa:95:
d2:1e:5f:b1:c7:df:39:bc:45:14:4e:96:00:c3:a4:7f:d6:23:
c0:dd:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:46 2025 by rpki-client