Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
File: 46b220b9-837f-4174-97e6-c711958273ea.roa (raw, json)
Hash identifier: 6ILSm7D4LCnB36xOjb0fXmJgqQ8eRLv4WinX7OKXXM0=
Subject key identifier: 13:00:9F:30:27:C8:4A:CB:CB:52:36:1C:9E:DF:66:43:E8:72:DC:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 68C76C266C30B5A163A6A2C53694710CF6B7967B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c7:6c:26:6c:30:b5:a1:63:a6:a2:c5:36:94:71:0c:f6:b7:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=205bf140747dcacc6aa0d088161761cd7f8449d281f692dca5f0265f793903d9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:5f:8c:d9:9c:3e:1b:61:ac:ed:de:27:ac:
0d:20:7e:ec:eb:65:31:fd:27:6e:62:b5:b9:02:0b:
a4:c4:4a:3b:ec:a3:28:44:77:e0:bf:39:e7:a5:de:
35:30:ec:90:9c:ac:66:2a:6f:f6:16:a3:d5:db:69:
c8:6d:13:28:5e:39:52:5c:b1:02:9f:7e:0a:b0:1a:
3f:a3:ce:d4:57:b2:f4:02:08:a1:67:0b:83:44:62:
07:59:b2:bf:d0:7a:21:57:22:b5:27:59:fa:a0:c6:
5f:06:8f:ec:3e:d3:66:8a:8a:d2:91:6a:73:ba:83:
07:a7:91:92:a7:7f:82:5d:f5:cb:5d:01:93:b5:a0:
44:cf:06:0b:db:8c:60:4d:e1:78:4d:f8:3d:69:75:
ef:91:b0:70:24:5e:8c:c3:c8:7b:cd:02:d9:0a:f5:
05:89:51:8f:b1:e0:bd:04:32:83:82:b5:95:bc:68:
41:69:8a:f7:01:d7:a9:7b:9f:7d:30:d7:86:2a:9a:
b6:11:a3:25:06:6b:15:a1:e9:4a:52:6d:ae:62:9c:
97:18:2b:fc:75:46:1a:d0:12:9c:9b:40:3e:54:b0:
f1:17:aa:54:3f:67:6a:33:12:72:70:b0:b4:e1:ae:
d8:4a:dd:03:d9:9c:ae:e7:a3:75:20:b1:d9:83:de:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:9F:30:27:C8:4A:CB:CB:52:36:1C:9E:DF:66:43:E8:72:DC:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:aa:c2:db:8b:4f:97:b6:c7:1f:f7:bf:0b:0d:f5:37:b7:cd:
6b:39:05:1e:cd:77:95:dc:35:3c:42:f9:70:18:48:b4:0c:f0:
81:61:a7:e1:a9:f0:7d:6b:9a:ae:92:2b:71:d8:48:3d:3e:9e:
79:b3:29:29:20:49:0b:2e:3a:e7:c5:01:9e:c6:e7:91:ff:95:
c0:42:c4:d1:c1:c6:bf:06:8e:9a:2e:49:ac:d0:85:2f:c0:6f:
80:c1:6b:6f:60:aa:b9:50:ca:cd:a1:17:39:df:7d:b4:7f:c1:
89:80:59:68:1a:aa:aa:73:7d:8d:1e:9d:99:37:86:12:c5:06:
e6:89:f7:50:52:76:93:4a:e9:b7:da:67:67:30:28:f2:6f:31:
20:4e:83:8f:eb:df:7d:40:a1:0e:50:d1:84:55:33:33:d2:32:
b8:f9:10:b4:cf:70:68:71:3c:fb:70:69:00:34:d0:ba:4d:c6:
28:72:29:7d:b2:e7:1b:8c:cd:f6:41:18:70:66:ed:d3:70:45:
34:21:52:0b:28:b1:32:f4:5d:89:0a:50:90:24:1a:2c:26:68:
e2:8a:f2:6a:e5:d3:32:ac:19:fa:9e:b8:a1:a8:14:cd:0e:9c:
44:a1:1a:02:21:df:b5:fe:81:59:74:a3:7f:bf:a1:06:da:bb:
67:bd:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:24 2025 by rpki-client