Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
File: 179c664b-afae-4c21-9c97-2a2a3985d5b0.roa (raw, json)
Hash identifier: 5X0cz9H+y8fWZLNQAoVWFZ6eplR2DdEf2cKjTO6A2Ew=
Subject key identifier: C0:B8:D1:75:01:C9:34:63:41:6E:57:75:65:EA:37:E9:9D:6A:C4:D5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36BB8DA16E1B4528D9B3120412D381F11D9CD689
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:bb:8d:a1:6e:1b:45:28:d9:b3:12:04:12:d3:81:f1:1d:9c:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=13502dc8bb2c3956dd5514bde5170e7ccab55289ffc81425ac4743fc61e1a127, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:21:30:4b:1c:a5:28:2a:81:46:9e:9c:be:
e1:3e:6d:92:30:4f:e9:00:c3:51:6a:a1:10:f3:55:
e9:37:98:f7:9a:a9:a5:fb:01:47:9a:46:63:c7:e5:
ac:0b:ce:62:e1:be:49:15:be:50:2f:6e:e5:f2:9d:
04:51:0d:3c:a5:b0:cf:55:2b:bc:b7:59:a3:65:dd:
70:be:5a:6e:a1:9f:61:bb:ad:12:74:06:b2:96:1d:
74:58:eb:3f:af:c1:74:5c:a6:65:38:62:b7:12:11:
35:b4:e6:6b:b0:45:06:c9:20:58:f1:09:e2:11:a5:
8a:1a:62:22:b2:e8:bc:c1:bf:83:1e:c5:b5:12:fe:
7c:9e:df:2e:35:79:05:8c:0d:a9:dc:c5:ee:57:ed:
d1:e9:ea:69:32:4f:d5:2d:a5:67:72:74:65:dc:3f:
aa:7b:7f:88:08:50:f0:0b:e5:bb:a6:5c:ae:d1:e9:
88:2e:18:f4:4e:8b:01:47:2c:db:02:2e:cb:d5:d1:
c5:24:a5:98:da:0d:41:0d:6c:fc:43:3b:8b:48:96:
98:c7:cf:97:53:ee:05:55:4a:f5:d9:90:86:ac:2e:
55:c7:54:1f:d3:70:5a:8d:10:b9:6f:39:6e:f2:4c:
f1:d6:0a:d0:cc:da:e1:72:58:2c:72:a1:87:f3:6e:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:D1:75:01:C9:34:63:41:6E:57:75:65:EA:37:E9:9D:6A:C4:D5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:73:16:d7:81:dd:79:a6:f7:6f:43:48:32:55:c0:f6:ac:3e:
28:fd:48:33:98:4b:1c:d1:4f:26:7d:e1:07:44:d0:e8:d3:98:
1d:94:5b:ea:c0:b7:9a:60:17:07:91:d7:42:92:7b:37:39:9c:
da:0e:ac:86:d2:16:1a:7c:15:79:39:df:71:25:3b:be:23:60:
d1:21:49:e5:01:8f:98:a8:2f:7a:4a:20:9a:e6:bd:c3:13:30:
0a:a0:da:ad:81:c0:2f:1d:19:6e:58:84:5a:28:04:28:dc:f3:
a1:13:aa:90:2f:43:ac:97:7d:1b:ac:75:c8:36:c5:3b:aa:03:
00:ca:ea:38:ec:ce:72:e2:e5:d1:c9:9e:ba:c9:db:6e:5f:99:
dc:82:df:f3:f9:3f:a8:6a:a3:d4:15:26:04:5e:df:9d:72:b9:
f5:18:55:d2:cd:a9:26:e6:18:89:3f:fb:b5:2e:b1:77:92:be:
01:aa:23:8f:01:66:f2:23:32:e6:52:99:cf:de:ec:78:18:4b:
5f:6b:4d:27:6e:90:4d:24:6d:9c:6b:6b:3a:6f:8b:38:89:cb:
34:2e:04:65:46:63:1a:d7:90:7e:eb:f8:95:d8:64:24:d1:68:
ef:ab:18:4f:9b:d9:21:70:7f:b1:4d:07:c5:f0:af:0f:cc:46:
dd:3a:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:37 2025 by rpki-client