Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
File: e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa (raw, json)
Hash identifier: mZJP2s02dReoV+18mkSYjnyB3I87iTw50spfp12z7lQ=
Subject key identifier: 91:E3:87:1A:02:7D:75:9B:C5:65:02:2F:EF:B0:D0:DE:E4:28:38:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 716A79B56164B27F85F2789102DDE820F8650217
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
Signing time: Tue 18 Mar 2025 17:01:11 +0000
ROA not before: Tue 18 Mar 2025 17:01:11 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6a:79:b5:61:64:b2:7f:85:f2:78:91:02:dd:e8:20:f8:65:02:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:01:11 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:c3:aa:cd:f7:d6:5f:f0:f8:eb:0f:43:e7:
b3:b9:98:15:fe:03:3a:74:bd:27:3f:45:c9:2d:da:
16:30:89:f2:34:11:00:1b:49:4f:c6:c9:aa:aa:37:
b4:27:23:1b:23:80:db:85:70:28:76:42:48:eb:03:
d9:ec:2f:97:43:8b:75:be:66:cc:7a:d2:ca:ce:03:
ba:cf:45:ba:5b:ca:e5:af:44:10:3f:f6:e1:14:b9:
63:fb:0d:ac:33:c8:0e:66:48:27:ed:76:bb:ef:62:
f5:45:2e:a7:c1:02:1d:cc:30:8c:73:10:0e:5f:38:
35:b7:ae:01:a2:8a:c0:7e:0e:91:e4:10:91:08:e9:
84:bb:de:59:01:e6:5e:fa:ac:d9:d4:c0:34:4e:c8:
fc:38:e3:b2:31:42:eb:45:58:41:4f:78:4a:d4:f9:
20:9a:9b:4f:5b:e1:1d:2c:e0:05:c9:7e:97:81:9a:
a2:6c:a7:ae:bf:86:9b:52:43:c3:3c:dc:50:05:1e:
67:99:70:cb:d3:9f:64:19:54:69:88:ac:d0:5e:34:
f2:d7:d7:6b:13:18:90:86:39:ff:13:fa:eb:a8:d8:
d7:2b:be:b9:2b:7c:1a:2d:37:5f:f1:a6:76:36:0a:
2c:e6:fa:dc:bd:b7:b9:e7:10:68:bd:bf:5d:84:d0:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:87:1A:02:7D:75:9B:C5:65:02:2F:EF:B0:D0:DE:E4:28:38:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.160.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:8c:1d:ac:7f:14:4f:11:44:f4:4e:fc:d6:91:31:e7:21:48:
38:e3:e7:56:6f:18:b0:73:19:d8:4e:b8:2f:ed:f6:34:49:bd:
8e:05:06:4a:bf:7e:d4:0d:0d:44:30:91:09:f9:95:ea:17:a5:
69:e3:16:78:10:7b:86:ee:0d:cf:66:09:45:60:6b:e7:f7:ea:
b7:4b:cc:e8:32:3b:4f:63:95:6c:70:bb:91:10:d7:c3:73:0c:
d0:56:9e:9b:28:7f:71:d2:de:3b:3d:79:3e:8f:8d:11:28:e9:
9a:b3:13:6c:f7:f0:98:13:58:36:d6:50:fe:31:33:93:f7:61:
f6:c7:8b:79:41:96:c0:36:de:40:29:a7:d7:a0:e6:6d:98:87:
7e:72:f9:2d:15:cf:5b:29:73:64:2e:f8:d8:25:f9:14:99:16:
53:c1:7c:4d:de:9d:54:da:36:57:b9:5e:94:e5:4a:b6:b2:9b:
5f:f4:19:6e:b0:37:b6:f2:65:bf:f6:81:79:6d:49:79:9a:21:
8b:42:a0:fd:55:d6:9b:47:bb:8a:88:0c:5b:9d:ff:c9:b5:4f:
6f:35:60:9c:0e:b6:5d:0c:e7:4a:d1:bd:c0:5f:48:9d:e0:dc:
87:46:3e:bf:74:6b:91:9c:05:ac:ce:83:0e:75:a7:bd:9a:9d:
04:ac:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:11 2025 by rpki-client