Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
File: 186c4a20-4025-4599-90c9-1eeb15cf6730.roa (raw, json)
Hash identifier: 07wbeyF22sj+FXHhuqLHFItuHiPPhTOFpEWTrbtU5XI=
Subject key identifier: A9:85:92:AA:AB:B1:53:E1:A3:81:E6:C0:51:CC:8F:4B:5C:A3:53:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12B9243D5EC16DC52F07AACD5E490FE5AFE3BDCA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b9:24:3d:5e:c1:6d:c5:2f:07:aa:cd:5e:49:0f:e5:af:e3:bd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=feef3359997dd0ed7780e419f06293c425343b7e9f2677fa3fa06ba4584b2ae6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:51:e8:0e:1a:c7:a9:19:f6:f1:51:7d:96:
7a:99:29:54:36:8a:16:e4:a0:1f:a8:4d:83:89:0f:
90:49:85:bf:b6:6e:be:79:be:23:60:8a:23:9b:87:
b2:27:72:e7:0e:79:9c:cc:0f:da:a0:4a:d9:c7:8f:
42:1c:22:86:96:1b:23:39:c2:10:3c:92:dc:ae:a6:
43:f9:85:03:5e:d3:84:d9:f7:0f:3f:15:9b:c3:28:
a5:48:42:8d:83:9a:87:b2:01:cc:35:11:66:b8:88:
72:68:a7:6f:a6:b9:5a:45:e5:78:a1:bd:35:0c:1e:
8c:c9:01:4c:a1:30:c3:49:7f:12:ce:6b:50:a3:54:
4d:13:5a:61:7e:eb:86:7e:fb:2f:c4:93:73:5d:2a:
d5:7a:9e:12:68:e2:1c:6e:37:27:cc:e0:6a:bb:0f:
70:ac:c3:85:11:39:79:f3:1e:0d:9e:90:c6:09:7d:
33:47:a4:72:6b:90:29:b1:fc:4e:7c:c9:b8:42:dd:
86:6f:cd:8c:e4:45:66:3f:a1:1c:22:f4:f9:59:67:
05:0d:84:42:5c:1d:95:cf:36:29:ba:13:37:c4:61:
68:17:9a:15:f4:e5:24:85:a2:2c:eb:25:9e:ed:4c:
76:30:7f:30:df:c5:26:59:2e:c5:e2:2c:c9:d2:f6:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:92:AA:AB:B1:53:E1:A3:81:E6:C0:51:CC:8F:4B:5C:A3:53:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:af:73:1b:c6:4b:36:dc:99:62:09:fb:f3:72:62:b3:28:50:
de:65:10:20:d1:79:9a:ae:50:22:82:f1:33:b8:d4:81:f2:69:
98:f4:a0:57:2f:9b:49:1b:0b:f1:52:59:3c:0f:20:be:5e:96:
0c:4f:ed:25:2d:a8:4a:b9:65:99:4f:7d:cc:8f:bf:5d:24:e8:
80:7b:65:22:97:eb:21:0f:f4:d6:ea:33:90:07:2e:6a:f9:4b:
42:d6:9d:7b:05:95:31:d0:6b:a3:d9:3e:bc:e5:0c:63:e0:6d:
3e:4c:48:13:6b:cb:9f:cd:8f:89:4c:9a:d1:a4:8b:38:cd:3f:
4b:7a:c3:de:e9:56:c7:29:97:f2:26:5f:2a:c4:1e:72:db:0b:
4c:29:5f:11:34:74:d3:1a:6f:3d:01:c4:44:46:e1:10:d6:63:
f0:a9:04:aa:d4:29:63:4b:fd:8a:79:69:68:8d:20:55:97:77:
9c:a1:72:76:1f:cb:18:5e:e5:75:98:c9:9d:e1:bd:65:f7:41:
29:61:00:95:26:0b:a3:f6:76:cd:94:b5:08:b8:78:85:0a:66:
ef:26:1f:6e:6c:d1:02:21:6a:36:37:eb:0d:66:dd:fd:18:37:
fc:dd:e5:c0:52:19:5e:ce:ea:62:66:3e:59:e1:68:e1:6f:e0:
18:37:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:32 2025 by rpki-client