Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
File: 3558ad32-215e-47a4-9f5b-477ec71e940f.roa (raw, json)
Hash identifier: HQPS6bGNPWIyONgUzDEtYdc9MQiV+FRptt3W+QywWW8=
Subject key identifier: 5C:44:2F:BE:30:8C:49:9E:AD:47:DE:9B:01:E1:16:A7:4B:A3:B5:15
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2DE444991333D10C7ED7EE8B2421B9DBC5750180
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e4:44:99:13:33:d1:0c:7e:d7:ee:8b:24:21:b9:db:c5:75:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=11ac14d6c85bf33b3a651fcfb30525c873f697a57e5d2c76063c05ef44b21a70, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ca:28:34:21:59:83:a2:e7:ce:80:5a:34:d8:
d3:7e:6a:bb:0b:84:b3:46:5d:a9:e2:1d:ad:58:14:
77:45:a0:0e:41:b9:43:7f:8b:e5:ef:16:fd:f9:6e:
8e:cb:4a:31:fc:44:b3:37:a5:3f:f7:f0:e3:af:55:
96:f5:b9:2a:62:ec:bd:97:08:e7:3d:4a:70:03:2d:
54:47:f0:ea:9d:e9:64:c7:c0:22:dc:d3:76:8a:dc:
e8:d9:9f:0e:5e:07:a0:df:2a:3c:b4:2e:89:73:da:
38:33:9b:4c:78:e8:19:8b:61:fb:ec:b9:19:be:cb:
b8:b4:fc:a0:2c:51:ba:bf:3d:b5:6c:0d:c4:81:be:
bb:e8:94:2c:ec:93:9c:ec:9f:36:c0:3b:0e:ce:5d:
e2:19:83:a2:dd:4b:54:01:8f:f8:09:b5:5f:7c:a9:
d7:ba:25:08:00:4d:45:ee:e7:53:6f:b5:5e:5d:59:
b6:90:f7:69:6e:4a:b3:33:42:ed:5c:3e:f0:7e:12:
29:91:e1:7d:23:13:41:dd:18:29:dc:bd:90:74:1b:
bf:f6:bd:69:79:a0:48:cb:14:a8:4e:fc:6e:0c:0a:
7a:c0:4f:c9:55:db:c9:e9:b0:00:ea:80:1c:d6:bb:
98:3e:33:2c:4f:49:93:25:1e:66:88:e4:b6:16:6d:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:2F:BE:30:8C:49:9E:AD:47:DE:9B:01:E1:16:A7:4B:A3:B5:15
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:3::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ec:c9:9b:c8:57:a8:ef:72:09:e7:03:dc:b3:c6:df:ee:84:
ba:77:8b:ed:35:ce:3a:b7:06:1f:78:b2:4e:59:82:ce:2b:41:
64:62:a0:aa:b6:d8:8d:dc:50:a5:f9:b4:26:76:28:40:27:8e:
b7:b5:54:55:3a:b7:50:92:01:18:93:d5:00:1c:7f:62:91:a3:
b0:6a:76:76:2e:9a:d4:05:54:00:f6:e9:6c:19:54:ec:ec:a2:
24:0e:e4:d3:47:dd:1a:b4:ef:20:ad:6d:8b:1f:93:9e:a4:e0:
36:86:b8:71:bc:69:34:15:dc:01:e9:d5:69:6e:7d:68:60:a0:
1e:8a:48:a5:8e:71:22:cf:3e:e5:d5:52:17:34:7f:e1:ff:56:
bf:9c:97:a6:94:d8:9b:b0:52:5a:e5:e2:7c:f8:d6:30:f7:89:
b8:de:ae:5d:d9:08:7d:d8:ba:44:d8:86:bd:43:12:06:41:d4:
5c:75:4d:1f:4c:0a:de:96:f0:ea:04:20:2f:c7:95:64:c2:ce:
53:9a:3c:21:a3:a1:56:3a:dc:91:a8:40:96:3f:7a:a3:5e:bc:
46:c7:c0:30:dc:66:e1:39:77:37:ca:25:cf:60:d5:a8:93:32:
a9:d8:0c:53:34:42:00:17:cc:b6:15:7b:5a:60:e9:ca:74:ba:
e5:6a:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:15 2025 by rpki-client