Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
File: bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa (raw, json)
Hash identifier: ohfqKgrgHfG2hqjXAeUTyPLKvG9i4eDIhSixjCyTn5w=
Subject key identifier: 99:3B:F0:7B:CD:87:E3:F8:9A:CE:2D:06:F1:D1:02:D5:18:59:7F:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60C81C1F961F1699C0AA158E2E7019F04B0289FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
Signing time: Tue 18 Mar 2025 17:00:59 +0000
ROA not before: Tue 18 Mar 2025 17:00:59 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c8:1c:1f:96:1f:16:99:c0:aa:15:8e:2e:70:19:f0:4b:02:89:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:00:59 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:40:f7:e8:bc:c7:c5:2f:ec:e1:f8:45:df:
7b:18:ef:8c:a8:56:d6:e1:91:ec:ce:2d:e9:28:5d:
77:4c:f4:aa:fa:b0:b8:a3:54:65:80:5b:da:ee:44:
be:5a:24:f2:2e:9f:07:e4:39:ef:c4:c2:53:2a:b4:
46:fb:cf:0f:54:04:11:aa:5f:ce:d7:fe:cd:df:c0:
28:98:7b:3a:84:25:23:5c:25:7c:8b:65:0a:c1:f3:
eb:4d:82:cc:0f:5f:46:49:55:b9:20:52:97:45:56:
a3:ab:ba:81:72:7a:dc:d6:08:67:3f:24:51:51:b5:
f1:cf:ee:cf:8a:1c:58:b1:63:59:4b:d2:09:ba:2e:
e0:ec:8b:e2:77:ae:9e:b0:3d:2f:6c:bd:22:94:86:
47:e6:7d:32:da:a4:70:3b:3f:5a:af:2a:74:db:3a:
91:e4:db:87:5a:21:a2:fe:b6:10:64:d7:73:c6:04:
4b:37:62:ba:12:ce:97:ac:4b:0f:dc:d7:ce:25:34:
cf:4b:33:bf:c3:10:c4:70:3f:55:ee:57:07:54:4a:
4a:b5:b4:a5:80:52:58:d8:fb:71:18:a1:8c:ec:be:
b7:5e:ef:7d:5a:84:cb:e4:7c:e6:61:3c:7a:fb:6c:
b9:48:d6:9d:8a:76:b8:6d:6e:9a:b8:f3:cd:aa:7b:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3B:F0:7B:CD:87:E3:F8:9A:CE:2D:06:F1:D1:02:D5:18:59:7F:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:7c:cd:51:0d:b8:66:74:e1:f1:1f:98:63:18:1e:a3:c0:2e:
6f:84:b1:9b:11:7b:c3:f9:f9:f4:fa:48:13:55:e2:ff:9c:7b:
40:84:a5:7d:3b:29:42:8a:1c:6b:a9:36:82:de:0e:f8:94:c1:
63:ae:68:97:39:81:90:7a:3e:d2:2a:2c:92:18:70:15:6d:8c:
1b:7a:3c:aa:3d:9a:78:19:d0:ca:37:1f:f9:43:75:92:c8:b2:
ba:7e:87:62:eb:63:36:67:86:ee:e1:e7:fd:0b:ae:f1:82:ff:
b9:66:ff:28:62:b9:99:3f:32:ef:f1:c1:8e:29:e0:98:43:d6:
1e:47:32:36:4a:5b:77:87:a7:10:88:16:df:e0:6a:28:85:4e:
fb:76:b9:1c:fa:18:78:8f:30:33:ff:ce:59:05:33:3a:f6:d4:
84:8a:20:28:43:a8:bc:7c:55:42:df:6b:75:ec:ec:0c:eb:12:
e7:42:14:a3:97:85:e8:d5:81:b4:fe:c7:be:41:e6:7a:d7:58:
08:ce:54:13:a5:57:e6:24:68:77:29:6a:d8:f4:28:b9:73:b6:
bd:dd:0c:c1:f1:e0:4c:96:05:53:a9:21:fc:a9:84:c7:c4:f4:
0c:21:37:8c:05:9d:d3:7b:b6:6c:8f:5d:ec:90:63:7e:5f:57:
ea:32:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:24 2025 by rpki-client