Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json)
Hash identifier: T9PrLUH0og3Zr0Tp8PhqaeFE0XYonr4uB53XsuY4ZJE=
Subject key identifier: 3D:FD:83:E3:43:99:26:24:55:34:AD:14:AF:F9:B3:95:E7:20:E1:4A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 495B3FF164B605806CCFE7E49B110B867392D5F3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.94.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:3f:f1:64:b6:05:80:6c:cf:e7:e4:9b:11:0b:86:73:92:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=55a78b71156a2f92eb96adc492950c8efc75020f1fcfdd688db3a4451be8b5cd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:d3:fb:c6:76:87:f6:00:a7:80:6e:d2:ad:
49:22:00:44:e8:31:dd:ec:72:92:b6:48:d7:3c:6b:
d8:e5:66:d0:fb:ec:8c:6b:f6:fb:73:cb:9b:3a:8d:
a5:9e:ba:c6:3b:ad:7e:19:21:9a:41:f3:af:12:19:
9b:82:57:fc:72:35:5c:b1:3a:f6:c3:10:ec:cb:86:
b1:59:9f:aa:98:db:c7:7a:4f:6f:06:b4:da:76:72:
50:ce:ad:a3:72:27:f7:fd:c2:3a:8d:d2:38:4a:65:
43:18:44:23:ac:cc:91:23:61:76:44:87:7e:cf:df:
c8:86:b1:38:b9:5d:be:90:0a:07:0e:38:20:2f:5e:
4c:a7:f4:3e:e7:37:75:d5:ea:57:98:b0:15:e5:d3:
2f:d2:0c:3f:4d:6d:f4:65:bb:3f:14:b9:39:01:53:
8e:61:3d:6d:b9:01:13:3b:e3:fc:63:bc:73:a4:5d:
cf:ea:c3:c5:f5:cd:6c:f5:0d:48:17:7e:04:64:50:
bf:f0:92:f4:95:e1:f5:93:cf:6f:1b:f5:95:34:c5:
93:2c:ad:6b:f6:8b:79:3b:fc:96:50:fd:4a:a7:6c:
c1:00:a0:c5:f2:28:74:5d:83:90:d5:00:81:7f:da:
a3:85:1a:3e:47:65:3b:32:24:9a:15:ad:b9:5b:92:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:83:E3:43:99:26:24:55:34:AD:14:AF:F9:B3:95:E7:20:E1:4A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.94.0.0/15
Signature Algorithm: sha256WithRSAEncryption
80:b3:42:4d:65:09:cd:63:5a:a3:59:23:0c:b8:fc:ef:df:4a:
bd:eb:48:a6:d5:30:a5:ad:d9:ca:de:75:5e:c8:43:95:f4:f6:
08:93:36:63:37:bf:54:c0:0e:d4:6b:60:0e:16:18:92:36:3f:
5f:37:40:6d:56:74:bc:23:c0:ca:55:bb:d0:07:9d:79:58:5a:
84:2f:d3:58:7a:2d:45:95:ff:ad:7e:f5:da:58:7d:08:05:fa:
51:57:c5:0d:0a:f5:bc:9f:0f:f3:e2:05:98:cf:d3:bf:61:82:
f3:78:34:2b:a2:ce:99:80:3f:6b:c6:77:ce:ee:32:17:31:07:
c8:44:10:fe:4e:e0:ca:b6:d8:4a:8d:56:99:f3:8a:b9:24:aa:
6c:47:d2:38:a7:80:e9:be:4b:c1:0f:51:25:54:1e:a7:80:d5:
b7:d4:17:98:ee:83:0a:df:34:77:9a:89:92:0d:2d:26:b8:d4:
6c:4e:5e:c6:1b:f3:eb:f3:97:96:30:0d:a8:65:60:04:95:b5:
9a:8f:b7:c7:de:76:20:29:4a:da:ae:a6:30:57:f5:b3:22:73:
a9:89:f9:53:c6:a6:1b:18:76:0f:41:fe:64:a3:39:ae:af:70:
79:a4:c0:6d:22:35:29:02:ea:13:99:c9:c9:ec:f1:3b:4c:b6:
f7:93:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:49 2025 by rpki-client