Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
File: 42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa (raw, json)
Hash identifier: esHdbuUpWkRbckEcEEgDkoVwAnqBEbIgq8+1Fb4bECc=
Subject key identifier: D5:48:43:9A:09:BA:C6:28:8C:48:0F:2E:5F:4B:E3:CF:B4:A5:B5:79
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0DD8FF3B120D19914DCA72DFDA50A2481F7CDD85
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d8:ff:3b:12:0d:19:91:4d:ca:72:df:da:50:a2:48:1f:7c:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c16c26838c5ee1e9ae0e3551b6b000cbe90c174fe570d56545fa7e7c5d839cee, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:e5:99:f3:ba:a7:9c:c1:2e:84:d5:ab:b3:
7e:20:8c:06:16:9d:f6:8c:98:62:24:e8:6d:de:89:
15:33:1b:ee:70:c3:78:90:10:30:c3:0c:af:4b:68:
88:a8:22:b7:c0:a3:7a:f0:e2:af:da:9b:dc:c1:72:
7e:b1:2c:ee:84:30:bb:2c:f6:f5:7f:72:f4:50:ac:
13:3c:cf:52:c7:81:c3:fb:46:9a:18:8c:28:d1:3c:
57:82:d8:94:1e:b0:bb:cd:00:ce:ac:02:15:cf:d1:
03:46:70:3e:5e:17:3a:c5:54:74:ec:fc:bf:03:75:
71:1f:f0:3d:1c:fb:a6:dd:ae:dc:db:22:01:b2:09:
2b:c5:01:74:57:89:ce:1f:2b:9d:e5:e3:cb:2e:28:
3c:a6:a0:f4:bb:c9:3c:98:23:02:28:0f:d1:30:e4:
c8:8f:53:5c:2e:dd:62:8d:e4:22:45:46:85:20:01:
58:1a:27:55:3b:85:ca:c2:4a:20:51:c6:65:cb:19:
bb:ee:c1:bb:99:8b:ef:25:1e:3b:ad:65:1e:68:49:
1c:54:e1:85:51:44:cb:2f:47:32:1c:e2:2c:08:02:
16:ea:ec:82:cd:af:41:cb:a6:90:51:f0:2a:fe:fd:
52:26:c3:5c:55:11:e2:7a:c9:da:0a:f7:72:1f:40:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:48:43:9A:09:BA:C6:28:8C:48:0F:2E:5F:4B:E3:CF:B4:A5:B5:79
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:2c:c0:82:6c:6b:85:2a:76:85:d3:d3:24:84:37:2f:0d:67:
56:e8:98:e3:6b:bb:39:09:76:7e:6d:9a:4c:d7:04:d6:98:74:
e0:e5:e9:de:c8:94:c8:00:ee:86:20:cc:82:a8:d7:86:80:4d:
96:08:43:0d:71:09:29:11:7a:47:f5:77:52:ba:07:de:73:57:
28:09:67:bf:b8:67:42:15:90:95:f2:7f:de:54:d4:ad:f9:d9:
5a:a7:b4:16:1c:37:b3:0e:52:65:bf:2a:b1:7a:70:b3:72:b0:
2a:30:be:4a:1e:95:bc:be:4a:4e:1c:86:d3:15:83:ae:7d:12:
1f:52:76:4b:fe:4c:35:b0:13:d8:38:07:82:79:d8:09:c3:db:
f2:9d:3e:5f:07:0e:1f:6e:0b:b8:2f:b4:38:a0:7c:28:1d:0d:
df:25:74:8e:08:60:58:23:c5:bc:67:ae:64:0c:4d:23:53:fb:
8b:51:6d:7f:3d:33:88:22:4e:87:d2:d6:17:ce:e5:d7:05:ad:
4b:6e:29:88:d6:01:49:6a:b4:0c:50:1b:60:07:42:52:ce:7c:
01:3b:fa:9a:62:da:a0:b6:e4:ee:ef:45:ca:0a:fa:06:bb:7c:
e5:89:af:2a:1d:13:53:46:d8:6e:ca:a7:99:15:15:ff:d0:e9:
15:a4:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:08 2025 by rpki-client