Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
File: 2740a5f5-ec55-42ac-b7df-f4c863c83981.roa (raw, json)
Hash identifier: E834Xv891vG0K7nOXTvXUV2cIcD3Ij2yXfzRALtX7GY=
Subject key identifier: 02:C9:A8:FC:66:24:E2:6A:DD:61:17:E8:EB:4C:2E:4F:CB:4C:AC:37
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6D21952BF4FCB4AFE55B4F9F4B93694D4C965F2E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:21:95:2b:f4:fc:b4:af:e5:5b:4f:9f:4b:93:69:4d:4c:96:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=07e958f1bdf149bab06ea32c4e61fbb14664b67189f4eb5f832fd816e757a8d0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:bf:90:ef:1c:2a:8b:08:13:35:b7:a6:8f:
ba:75:29:24:35:b0:fe:37:72:22:d0:72:a2:47:5b:
c3:10:14:e6:90:19:15:99:f5:b3:18:4d:14:c9:f3:
db:e9:77:54:42:31:2d:2b:cd:8c:e8:68:f7:ad:9e:
2f:6e:d7:90:fc:7b:a5:84:e3:0a:3c:52:c6:9e:8b:
e2:72:51:62:7e:39:aa:fd:5e:52:96:61:b6:d7:e5:
94:a3:14:3b:a7:25:15:42:6e:53:d9:df:e7:3a:0f:
4e:a6:4a:b4:a5:f1:b0:f7:14:f4:a2:0f:2f:d8:24:
7e:22:34:0b:26:fd:4a:3a:1e:96:b7:44:0b:b8:4b:
67:34:33:07:84:32:99:18:08:09:bb:bb:a4:33:a1:
f3:a4:15:9f:1c:98:0d:8b:fc:47:7e:a7:f7:39:7c:
bb:a8:a9:25:a3:d3:2b:05:64:5e:e0:43:40:41:c8:
79:10:c2:63:e5:c5:c9:cc:93:19:5d:11:9d:2a:54:
d9:2a:44:d2:63:df:1e:c0:7d:86:65:49:7b:54:69:
db:82:d8:86:10:0d:1b:b4:f0:fb:58:59:da:b5:1a:
a2:bb:89:07:de:06:f6:ca:35:35:a6:52:37:4d:51:
b8:eb:25:b9:64:a6:b3:39:5b:cf:92:63:ce:cb:92:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:A8:FC:66:24:E2:6A:DD:61:17:E8:EB:4C:2E:4F:CB:4C:AC:37
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:86:f4:cd:20:98:b2:f6:f0:8d:96:4d:32:2c:d5:25:dc:de:
9a:3a:2e:ba:ed:55:77:02:cb:74:67:22:77:16:bb:26:65:cb:
5b:fa:32:7c:6a:18:41:30:6a:f4:2f:66:2e:f1:a4:ea:26:e7:
83:79:1c:4f:ae:9f:4d:78:95:84:a1:cd:c2:71:a6:16:d3:87:
c5:bc:86:ba:6c:6f:79:2e:de:d6:eb:d8:cd:34:18:22:48:42:
c0:4f:cd:12:54:68:32:bd:04:47:79:cb:36:35:aa:39:61:82:
73:6b:fc:37:e7:75:3d:3c:8b:dd:d4:70:e4:f7:bd:23:34:5a:
3e:e4:d8:3d:d4:09:64:31:90:13:79:ab:e9:12:77:3e:98:20:
7f:d1:13:88:60:e1:78:49:aa:ff:26:87:04:15:0b:3f:ca:f0:
8d:d0:f1:00:82:49:23:1a:b4:54:c9:94:fc:90:2f:2d:a6:b7:
32:35:1c:12:18:fb:33:83:54:3f:3c:81:a1:9f:b2:20:80:f8:
03:1e:f6:1a:68:a1:2f:7a:21:ed:8b:19:8d:ef:7c:2d:8c:5e:
0e:f9:19:77:ec:2b:1d:b8:17:b9:14:35:34:2d:e9:21:55:45:
a0:e3:91:8e:e0:37:22:8b:a6:58:fd:5b:6f:5e:2a:52:ae:41:
90:d5:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:33 2025 by rpki-client