Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82037871-73f4-40ba-be5d-495a41d85184.roa
File: 82037871-73f4-40ba-be5d-495a41d85184.roa (raw, json)
Hash identifier: 7pDFRSg+//Heu4FinN8QE+DTkz9ZrRr7soc4LQTleFo=
Subject key identifier: 45:C8:DE:FE:91:68:01:58:CB:5B:BD:71:5B:97:B6:C9:96:A0:7E:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AFE9B0940E657F85E80AAD868F0EA1C2E1FB029
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82037871-73f4-40ba-be5d-495a41d85184.roa
Signing time: Mon 17 Mar 2025 15:40:36 +0000
ROA not before: Mon 17 Mar 2025 15:40:36 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 7224
IP address blocks: 46.51.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fe:9b:09:40:e6:57:f8:5e:80:aa:d8:68:f0:ea:1c:2e:1f:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 17 15:40:36 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:60:8d:c3:f1:ec:9c:fb:1b:e7:7d:c2:10:
39:80:d6:9c:8c:a3:0d:11:ec:8e:f9:8c:4e:6b:ee:
f6:00:9e:d7:a2:08:45:04:2d:94:ae:91:7b:24:96:
5a:20:bf:cc:94:95:a4:87:e9:bd:7d:2f:d8:00:d9:
82:50:6b:d3:a2:a6:91:2e:de:c2:52:e8:a3:46:bd:
dd:4f:d9:5a:27:5b:32:db:45:4a:47:01:32:fe:2c:
89:4d:c1:5d:6a:72:44:36:9b:13:91:b9:24:41:11:
b5:0f:9d:a7:27:6c:ca:94:09:4d:40:23:2c:d3:60:
b5:81:06:d9:49:86:57:d5:ab:e8:68:1f:4f:3b:34:
59:7c:a5:14:ba:70:e5:ed:15:4d:f2:ce:c9:82:1b:
50:31:8b:d2:08:1e:e3:3c:01:e9:e5:ab:eb:f6:ec:
8b:26:3c:96:ec:45:c0:b2:b8:dd:48:14:58:3d:41:
54:1e:81:d1:b7:07:8b:80:ac:f3:ac:4b:16:d4:f1:
06:3c:4f:e2:db:eb:fe:4e:d5:de:de:fb:9f:c4:e3:
65:ec:f8:24:76:bb:97:3b:cd:f0:5b:67:32:ca:05:
4c:1a:85:16:4c:cb:ea:9b:24:27:87:f9:72:ea:46:
81:66:2e:49:97:ae:da:ab:33:f7:07:ed:5c:6f:ad:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:DE:FE:91:68:01:58:CB:5B:BD:71:5B:97:B6:C9:96:A0:7E:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82037871-73f4-40ba-be5d-495a41d85184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:3b:23:21:9a:c4:b7:34:ea:68:40:64:c9:34:d1:21:5d:b3:
e8:8e:8e:51:84:49:e1:e3:6b:18:d8:11:d6:a3:f5:97:53:a1:
2e:88:16:c9:82:28:de:e7:a1:9a:de:c7:df:42:5e:fd:4e:9e:
8e:bb:eb:80:95:28:05:c6:b9:f8:75:46:94:34:d5:21:2d:ef:
ea:0d:7b:b0:12:4b:2d:31:69:06:ae:64:b3:37:de:75:51:cc:
38:bb:b0:fe:05:1c:82:11:8a:ba:30:89:e8:77:15:5b:7b:6e:
e6:f5:e3:94:f1:98:76:6b:4c:76:cb:b4:b6:dd:1f:6f:c7:11:
1d:8a:02:6a:90:b9:cc:96:32:e5:8e:06:b0:a0:93:87:37:8f:
1c:5f:0b:f6:86:e6:c4:4d:4f:aa:32:2c:5e:27:ec:69:36:ed:
3a:1f:f8:96:d2:f4:62:d5:42:4f:5c:b4:cc:74:32:a9:7a:10:
93:a5:65:fb:a8:f6:b8:2d:a7:18:79:ac:3e:fc:f5:3f:77:4d:
28:d7:4e:5b:bb:15:cc:36:ef:ab:5c:37:2a:5a:8f:e8:a8:39:
dd:d0:93:46:1d:f4:02:73:c2:8f:a4:db:9c:47:8e:7d:d9:d5:
bc:f7:3b:58:9d:6d:c1:8f:83:a0:f4:41:de:d9:cf:53:08:26:
7e:40:e3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:09 2025 by rpki-client