Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: fVSqPw4i+fgp2rTf2zlnDV6JYMg/bG+QpeJoeRZHt70=
Subject key identifier: 16:AF:B9:D8:3A:E6:6B:67:99:83:E6:A1:D1:57:6F:21:50:2F:E7:49
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4511D4997C30FCE628F378EC67C9C048BA2DFCCB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Tue 18 Mar 2025 17:01:09 +0000
ROA not before: Tue 18 Mar 2025 17:01:09 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:11:d4:99:7c:30:fc:e6:28:f3:78:ec:67:c9:c0:48:ba:2d:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:01:09 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:7f:d1:d6:d9:02:e5:35:a7:75:92:2f:87:
74:a3:25:ba:c3:2e:8b:3d:14:94:89:ee:11:5d:b3:
57:22:4a:07:ab:e3:9a:59:99:b1:86:51:f9:21:f7:
2e:5d:15:b6:e0:5b:31:81:69:22:71:4e:dd:53:6b:
df:52:ba:df:ec:d8:01:ff:79:07:f7:b1:b2:de:ca:
a0:3b:5b:0b:0a:8b:c8:ef:fa:dc:8e:43:f5:cc:c7:
f7:9d:d6:28:ff:00:78:16:f7:75:a5:19:a4:61:ab:
9c:c8:31:69:fa:6e:08:b6:99:0e:f5:28:a2:94:55:
62:48:10:8c:64:6e:64:4e:3f:ba:07:d2:b2:2e:a9:
c7:72:6f:fd:36:1a:ae:d7:a3:da:fb:fb:a1:9e:2e:
25:12:4f:77:d8:75:a0:8f:8d:90:b6:f0:80:74:90:
18:e5:8b:c3:0b:fc:85:ff:e0:a0:f2:38:d4:9d:78:
9f:cb:77:a6:f7:86:ae:ae:aa:b0:54:bd:d7:fd:b6:
7a:b5:ef:42:c0:9d:27:98:22:66:22:4c:00:ac:83:
fb:d0:4b:7e:e6:ec:9b:77:7d:fd:89:b9:13:f0:f7:
76:c9:cc:0e:32:d8:ac:f4:a4:bc:0c:c4:55:47:2d:
4a:09:f0:93:b4:a2:01:38:28:bb:55:a9:ec:33:42:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:B9:D8:3A:E6:6B:67:99:83:E6:A1:D1:57:6F:21:50:2F:E7:49
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:25:be:51:57:31:80:11:36:4f:28:2a:7a:a5:f3:9e:6f:02:
3a:f9:a8:8e:d0:01:b1:70:52:56:cc:78:ce:f2:88:04:8e:fb:
b5:59:ea:07:39:9f:2b:02:5b:a3:ea:4e:35:82:cd:20:ec:e2:
3d:4f:d8:21:b7:55:dc:42:18:42:fd:bc:70:b8:f0:80:1f:03:
57:45:f9:48:e4:f0:65:f8:0c:8d:67:95:4c:b7:65:88:78:9a:
51:35:fa:ed:38:57:30:ad:70:95:e0:6c:65:9a:29:11:ff:0a:
cb:6b:34:4b:a4:6a:77:3e:30:4c:97:bc:31:e7:9a:c8:b2:5b:
48:aa:40:15:c4:fe:d8:06:19:14:cc:0a:e8:c8:49:53:5b:f7:
78:8e:0c:f3:8b:5b:a9:5e:75:14:02:58:ac:88:ea:d9:c1:99:
28:6c:73:31:cd:56:34:87:83:81:57:fd:15:a6:59:62:9f:6b:
47:72:8b:d7:9c:89:d9:63:fb:33:62:cf:79:29:97:85:e0:79:
db:ee:2e:3e:cb:bc:7a:1a:8f:3c:a7:26:5d:64:3d:5d:8d:01:
fc:4d:0f:60:09:1b:b0:73:4d:5b:df:c6:ad:f7:c4:28:23:dd:
cc:e5:12:aa:2a:fa:c7:a3:71:91:b0:92:91:90:58:83:60:69:
42:1f:c9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:14 2025 by rpki-client