Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
File: 2b51d415-1366-43ea-8ce9-f13b63a2c827.roa (raw, json)
Hash identifier: EHKZ15BYm0SukGipRQZUQkyAomTx0rgKkTAGRcbd5l4=
Subject key identifier: B6:3C:B3:67:C1:BA:4D:97:9B:C5:BF:74:D9:CD:91:11:80:79:5B:B0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50653F3B70032F7222087798651FDCF89B5AEAD0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.45.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:65:3f:3b:70:03:2f:72:22:08:77:98:65:1f:dc:f8:9b:5a:ea:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=efed7fc6f55df33d2e10feef676ecf29b1b1b0de80ee79d2151e6c2227b0f35a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:58:cf:24:22:d0:9f:1e:2f:a3:1a:f6:c7:
e0:e1:c9:a8:54:36:5a:e2:f4:94:38:27:f1:fe:22:
88:ca:23:5c:03:f9:21:00:a5:11:9e:a6:b1:d7:94:
62:7d:d3:dd:09:a5:0d:d1:b2:78:68:83:fa:90:61:
61:e1:3c:91:63:c4:64:3c:04:d1:47:96:ed:59:d1:
93:77:e2:db:02:26:f8:2e:23:08:50:9b:a0:b9:ac:
2b:6d:22:f8:79:d7:58:73:7a:0f:ee:97:b6:99:b1:
89:05:e3:6c:45:b8:d3:b6:9d:4d:a0:7f:e6:ac:81:
e0:be:16:02:ab:05:7e:66:ea:5e:42:5f:83:dd:8f:
63:12:ea:c4:17:cd:9e:a0:7c:ed:a3:c7:cc:a0:ac:
a1:3c:23:9e:75:36:d7:5b:d7:de:f4:92:93:81:fd:
62:ea:ae:e9:0a:24:9e:13:43:2d:a9:bf:06:84:9a:
ee:02:b2:d3:c1:d8:d1:c0:86:86:b9:71:6e:6d:8c:
cb:04:c9:e3:5d:f0:eb:15:ac:a5:b4:36:a3:5d:a5:
83:48:32:a3:d9:cb:83:e3:f9:10:b4:23:c8:99:1f:
c6:27:0c:60:a2:a9:0d:f3:3d:c4:4a:f0:d8:24:ea:
b0:d1:57:d5:08:2f:31:54:6e:81:c1:ac:6b:d1:b7:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:B3:67:C1:BA:4D:97:9B:C5:BF:74:D9:CD:91:11:80:79:5B:B0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:88:17:c0:bf:56:03:f5:79:9e:ad:91:0b:49:56:08:b8:80:
bb:fb:55:98:9b:ef:95:52:07:43:77:d0:02:a5:22:33:14:56:
84:5e:02:66:7e:0d:fa:b1:a5:fb:27:a3:40:5c:fd:3c:a2:05:
e8:1a:87:cb:30:6a:76:7b:90:8b:fa:6b:11:72:51:9a:f3:0a:
42:1d:86:08:33:04:9f:cb:7e:36:fd:1f:2a:55:97:84:e3:23:
5b:b3:58:10:66:14:83:f2:79:af:96:c3:1d:51:b8:bb:b3:a3:
f0:18:ef:a9:76:d6:13:5a:ca:9e:e9:73:1b:8d:1c:46:09:9b:
50:e5:53:0f:8f:5c:58:89:c3:e3:e9:94:d4:cc:35:0a:c3:37:
a2:5a:24:f3:a7:42:35:1b:b5:0e:6f:bf:24:67:f8:f3:71:6c:
2d:8f:29:b0:15:cf:78:d9:e7:a8:6b:6d:a1:e8:9e:1d:72:9f:
41:c0:e2:21:d8:3b:52:7b:25:7d:24:b3:69:ad:8b:2d:07:8b:
5a:7c:4c:e0:4a:09:7e:26:35:76:a5:5a:ce:c4:86:be:fd:f9:
2a:e7:b5:7a:43:88:f0:82:2b:79:f7:a0:30:be:be:61:15:61:
bd:26:84:91:67:eb:0c:d5:71:2d:7a:30:8e:6b:2d:9b:18:09:
7a:38:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:01:04 2025 by rpki-client