Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: jLOQdSOEfuxf503M1RQFNs7MPb45pI9X20vf1/oaODw=
Subject key identifier: 4E:AD:44:4B:2A:34:36:E0:08:44:E5:F2:46:8E:2D:C8:28:DB:81:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26CBD08009D47BC09635850EA35297214C925316
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Tue 18 Mar 2025 17:10:08 +0000
ROA not before: Tue 18 Mar 2025 17:10:08 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cb:d0:80:09:d4:7b:c0:96:35:85:0e:a3:52:97:21:4c:92:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:10:08 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:b0:ef:48:65:ea:1d:1b:0d:42:82:7f:ba:
d3:93:ef:e5:ca:28:a7:31:e0:8b:e3:47:6c:c8:02:
7f:37:6c:e4:54:0a:bd:81:4f:09:61:21:f0:f6:66:
fd:14:a7:20:c0:13:c8:ef:b7:71:ec:6a:61:24:60:
c7:2f:ce:8e:de:70:90:9f:f6:d6:a0:f1:61:6d:4a:
1e:ac:bd:62:1e:95:26:80:26:52:d6:6d:fe:ea:78:
ab:04:77:79:c9:e7:01:0e:68:8c:04:66:d5:cf:f3:
39:5e:48:1d:b5:75:20:28:86:e6:53:92:3e:7f:4d:
0c:c4:c7:ca:4e:ab:67:07:6c:f3:80:09:32:42:e3:
3e:0e:d9:d2:50:4c:35:d9:19:df:12:22:26:54:8c:
63:9e:91:1e:19:3a:10:30:22:d4:b2:d0:6e:73:35:
1e:e4:d8:4c:4c:a7:40:38:e3:0c:6a:52:0f:0b:c2:
06:02:8d:2c:37:78:df:06:bb:96:17:59:92:ab:d8:
36:cf:11:4e:01:48:0d:90:9f:f2:b1:44:b3:a3:f0:
5c:3b:4b:e7:4d:59:f0:ce:af:79:c9:ef:51:fa:fc:
23:3d:c0:06:9f:d9:ea:96:01:01:09:e8:c5:69:53:
39:86:3b:dd:ae:e4:a8:d4:86:aa:d2:42:e4:ac:63:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:44:4B:2A:34:36:E0:08:44:E5:F2:46:8E:2D:C8:28:DB:81:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:52:5c:ec:e2:c4:43:11:c8:b7:25:37:3e:51:73:49:b5:4e:
d4:b6:dd:7f:52:2f:21:36:5e:6a:91:d1:29:51:10:56:a2:f6:
08:1c:7d:72:7d:89:4f:2c:95:06:f4:70:aa:0b:f7:73:be:95:
a0:b9:4d:0f:0d:56:08:43:a6:0e:61:79:66:85:cb:73:84:03:
99:b9:4f:f3:60:07:18:24:9b:b9:45:b1:50:33:ce:71:c5:ab:
9e:6e:b2:c1:6f:65:8f:73:2e:27:ef:4c:ce:11:dc:99:e6:96:
98:3f:83:3d:c6:b3:40:83:fb:80:84:ea:ff:2a:02:39:41:33:
b7:de:c2:fb:e4:20:81:06:ae:7a:a1:bc:70:ad:b8:ec:ea:4f:
0d:b8:16:e2:4f:1a:63:22:f1:ab:d7:de:e0:8f:70:39:5b:f3:
d9:35:4c:22:94:c9:30:e1:be:cc:09:07:7f:5f:3b:89:59:24:
b9:14:28:de:9d:a9:b3:87:9b:ca:64:ca:70:1e:b5:4a:5f:95:
63:2d:48:40:80:04:f4:aa:3b:00:dc:2a:cb:9a:41:d1:4d:4c:
37:c2:0e:66:19:42:2a:2e:6e:ed:38:5a:2a:a4:20:b5:7b:d4:
10:dc:bc:14:4e:8c:88:f9:56:18:79:0a:f9:4c:aa:c5:ed:32:
9a:74:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:16 2025 by rpki-client