Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
File: 6e1e6e69-6595-40ff-9430-d53f22670630.roa (raw, json)
Hash identifier: cLodvteThMfWbAE/S4C+UTprn/g0AS2CKCEgYVkAo4A=
Subject key identifier: EA:8C:9D:6D:0D:B8:2D:79:3B:47:CE:88:07:35:8D:E8:41:1D:DC:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 482D36E4206C05AA7663C884A57ABFF1794CA32B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
Signing time: Tue 18 Mar 2025 17:01:13 +0000
ROA not before: Tue 18 Mar 2025 17:01:13 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2d:36:e4:20:6c:05:aa:76:63:c8:84:a5:7a:bf:f1:79:4c:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:01:13 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:48:61:54:a2:c2:dc:f0:be:a3:5a:8a:52:
c2:d7:37:5e:99:46:9e:a6:67:66:d2:b8:3f:b0:18:
a1:b7:14:bc:13:b6:36:2d:0e:94:79:04:cf:b4:00:
7b:57:e8:5c:1e:0c:9e:01:ee:a5:d9:cf:dd:30:d1:
16:35:60:34:29:11:fe:93:9f:43:0e:0d:76:4c:10:
76:b1:ab:04:65:21:a0:d9:60:e4:a0:45:19:0a:fc:
a4:da:e0:0e:40:bb:9f:45:ee:66:22:15:c2:6c:e5:
10:e7:3e:60:bd:37:74:2d:d5:b2:07:08:b6:29:3d:
06:30:1a:2d:79:11:36:b2:c1:8e:7f:b3:1f:da:a9:
2f:97:88:9c:43:86:fe:8c:ca:d7:43:2e:50:ee:19:
1b:0b:41:07:63:11:80:72:c0:70:7d:e0:f4:0d:08:
65:fe:43:ca:70:2c:88:9c:42:9d:a5:af:d9:4b:79:
8a:58:a2:a9:87:7a:8b:6a:a1:31:b0:b2:98:e1:02:
00:d4:5e:0e:8d:8d:3e:3d:40:48:46:d2:57:86:47:
d9:c6:44:09:fd:5f:d2:a8:e5:f0:53:26:26:e6:eb:
63:42:fa:c6:f7:7d:50:8c:9c:4a:94:28:75:b6:09:
84:d3:7b:9d:79:56:45:c5:88:e7:b6:58:92:dc:c7:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:9D:6D:0D:B8:2D:79:3B:47:CE:88:07:35:8D:E8:41:1D:DC:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.72.0/21
Signature Algorithm: sha256WithRSAEncryption
17:79:10:50:48:55:48:00:ce:57:97:e1:65:43:c1:8c:cc:16:
78:97:1b:f4:ef:9f:42:5a:2a:6a:80:eb:fc:68:83:29:7c:e1:
ba:23:19:c3:35:fb:af:96:b5:4e:a6:13:e9:52:9c:09:e7:bc:
89:62:10:72:21:00:4d:3b:35:af:d1:4a:be:cf:26:74:ca:43:
f7:e9:5c:1b:d1:27:bf:f0:50:66:92:82:cc:1d:6c:49:c9:f2:
a3:e2:f7:b7:5c:f5:fc:92:b2:39:cf:f2:29:9c:b5:0d:6a:41:
92:cf:64:ee:35:98:1f:2a:54:04:39:17:9e:3f:88:fe:b7:27:
5c:d9:64:83:48:55:93:21:7a:7f:8a:40:4c:71:66:d7:87:58:
ed:42:b6:a9:4c:d5:e6:e9:79:20:e7:75:97:a3:9e:34:f1:7c:
81:6b:dc:21:5d:4d:05:7e:73:fd:5c:78:8d:4b:2b:29:a5:45:
b7:b1:72:28:6a:ab:2c:4a:e7:d0:94:cc:1a:05:70:5e:5a:73:
2c:77:95:4e:d6:8e:06:f7:9c:0d:a0:30:4e:73:84:05:4c:b2:
bf:85:67:c9:b5:f7:c6:35:ec:a3:91:64:9d:82:53:21:09:9c:
88:6a:67:ed:53:af:3d:e7:e7:2a:76:41:ac:c8:56:c9:31:26:
d3:6c:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:00 2025 by rpki-client