Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ac6fa2-24c1-44ea-9f18-30991eb06d32.roa
File: 55ac6fa2-24c1-44ea-9f18-30991eb06d32.roa (raw, json)
Hash identifier: 7zfk/JS2VpqeGLhzxLHHpO3i+DmIoXk7v+rmqIKPwA0=
Subject key identifier: 0F:AE:D5:87:38:E6:9A:69:DA:5D:7E:0A:18:A3:4B:A4:34:7F:83:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BCE3366ABBF47BE1959B597E95B69052111E1C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ac6fa2-24c1-44ea-9f18-30991eb06d32.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ce:33:66:ab:bf:47:be:19:59:b5:97:e9:5b:69:05:21:11:e1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=c80eed0d24c1530b491d8ddaeb8a03343f880f474b4834f698454c815f9dcd9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:1d:fb:64:c4:b0:69:10:9a:02:41:33:90:
50:e1:eb:c9:7d:f9:9d:17:af:88:98:72:7a:2b:19:
53:06:14:7f:54:cc:2d:76:7a:f3:60:1b:da:ac:2b:
9e:3b:6e:24:2c:ef:93:d7:9c:fa:86:97:85:49:47:
71:01:13:02:e9:d7:11:78:23:b3:8a:41:18:7f:bf:
ae:49:d1:3e:50:43:9b:6f:e0:70:73:dd:5d:b0:bc:
1c:21:0a:95:86:ce:20:f1:b6:60:96:f5:d4:9f:b7:
13:88:bb:d0:55:a8:ad:d6:2b:4e:ff:8f:7c:d7:d6:
35:4d:1e:25:58:01:03:b9:ab:56:ca:6a:3e:66:b4:
04:44:1e:80:20:f0:83:02:3d:11:f6:b0:1e:62:e3:
cd:60:94:0f:5e:7a:63:7b:b5:2c:ad:3d:c4:a6:f6:
c0:e9:c2:e1:7e:7c:b4:ca:56:48:cb:90:e7:d2:1e:
e5:f5:7d:21:0b:7f:21:94:26:b9:92:1a:80:88:d6:
28:1b:4b:7e:cb:07:5e:04:59:18:ba:c6:c2:9c:c3:
7a:3e:07:1b:c6:f3:f9:37:83:23:ac:66:be:e6:e7:
26:51:09:6e:af:98:7c:ac:56:ff:9d:9d:5d:9d:1d:
30:d0:7c:c5:3b:f6:30:a3:0b:42:93:68:bc:de:7f:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:D5:87:38:E6:9A:69:DA:5D:7E:0A:18:A3:4B:A4:34:7F:83:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ac6fa2-24c1-44ea-9f18-30991eb06d32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.192.0/19
Signature Algorithm: sha256WithRSAEncryption
93:62:2c:0e:dc:40:cd:30:b4:d6:93:92:9e:46:a7:0b:1d:99:
ba:54:95:a9:6c:58:cd:15:59:12:bd:fa:ba:0d:f7:35:31:ec:
47:b3:df:60:0f:6c:65:c2:95:c2:0e:26:36:25:ba:3c:9b:6c:
48:4c:35:63:4b:a4:a1:73:b1:fd:2a:96:5b:07:34:1f:67:d8:
c2:f0:ef:3e:48:30:16:d4:39:4a:6c:52:dc:71:15:97:04:9b:
92:d6:6e:76:0f:f1:4c:f3:00:82:d4:a5:90:33:74:a4:79:d3:
41:b4:15:e7:5d:6a:bc:7d:d2:2a:2d:77:e2:9c:e3:da:f4:8b:
63:90:f1:5a:42:8a:59:a0:b4:39:01:53:ff:60:3b:80:13:df:
f9:97:8e:de:c6:07:13:27:a2:8e:cb:d1:f4:97:42:8d:2e:4d:
c3:10:5d:00:8a:71:cf:fe:95:28:b0:80:95:f3:aa:96:fa:ae:
69:30:60:0a:4b:f4:4e:28:71:47:c3:ad:96:22:f3:f1:b9:24:
e9:65:da:2a:fc:0c:59:73:b9:0e:6f:d1:99:70:7b:2d:2d:a3:
6e:1a:6c:4c:5f:c6:26:47:bb:dd:b0:5a:8a:98:22:79:32:a9:
1b:67:61:f5:da:29:7f:0c:11:bd:80:47:71:df:d6:67:27:0a:
4b:33:7d:d7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUa84zZqu/R74ZWbWX6VtpBSER4cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGM4MGVlZDBkMjRjMTUzMGI0OTFkOGRkYWViOGEwMzM0M2Y4ODBmNDc0YjQ4
MzRmNjk4NDU0YzgxNWY5ZGNkOWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL7MHftkxLBpEJoCQTOQUOHryX35nReviJhyeisZUwYUf1TMLXZ682Ab2qwr
njtuJCzvk9ec+oaXhUlHcQETAunXEXgjs4pBGH+/rknRPlBDm2/gcHPdXbC8HCEK
lYbOIPG2YJb11J+3E4i70FWordYrTv+PfNfWNU0eJVgBA7mrVspqPma0BEQegCDw
gwI9EfawHmLjzWCUD156Y3u1LK09xKb2wOnC4X58tMpWSMuQ59Ie5fV9IQt/IZQm
uZIagIjWKBtLfssHXgRZGLrGwpzDej4HG8bz+TeDI6xmvubnJlEJbq+YfKxW/52d
XZ0dMNB8xTv2MKMLQpNovN5/EmUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQPrtWH
OOaaadpdfgoYo0ukNH+D9TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTVhYzZmYTItMjRjMS00NGVhLTlmMTgtMzA5OTFlYjA2ZDMyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBS6JwDAN
BgkqhkiG9w0BAQsFAAOCAQEAk2IsDtxAzTC01pOSnkanCx2ZulSVqWxYzRVZEr36
ug33NTHsR7PfYA9sZcKVwg4mNiW6PJtsSEw1Y0ukoXOx/SqWWwc0H2fYwvDvPkgw
FtQ5SmxS3HEVlwSbktZudg/xTPMAgtSlkDN0pHnTQbQV511qvH3SKi134pzj2vSL
Y5DxWkKKWaC0OQFT/2A7gBPf+ZeO3sYHEyeijsvR9JdCjS5NwxBdAIpxz/6VKLCA
lfOqlvquaTBgCkv0TihxR8OtliLz8bkk6WXaKvwMWXO5Dm/RmXB7LS2jbhpsTF/G
Jke73bBaipgieTKpG2dh9dopfwwRvYBHcd/WZycKSzN91w==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net