Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
File: 46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa (raw, json)
Hash identifier: 1vkMN0XUFwYzG/0ZE7sMZPpH2RZ9YoVjBbIlho1vjpA=
Subject key identifier: 68:66:E5:00:D7:98:7C:92:A2:14:D6:3C:47:1C:26:64:EC:D1:34:3F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 592B041CC7B1CC9715585E78C97027B0942A8978
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2b:04:1c:c7:b1:cc:97:15:58:5e:78:c9:70:27:b0:94:2a:89:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=6e451a8a738f5d42a7da3b183685ad0c548da2345418ca497e35aa05db065ccc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:7a:56:cd:60:8d:d8:9c:af:0a:5a:9a:e7:
c0:45:67:1c:cc:e3:a4:76:71:0b:e8:09:c1:ef:89:
4d:da:28:bf:7f:3d:00:37:93:57:a5:7b:55:e9:6d:
a6:d3:fc:eb:66:9f:29:51:f9:7b:b2:38:07:51:c7:
2e:05:32:12:5b:cd:bd:38:40:db:99:f4:5d:bb:b9:
61:c9:b3:c8:f4:31:38:78:81:c6:e8:f5:7e:62:3b:
b2:48:e2:d2:47:34:46:5c:7d:57:bd:82:19:2f:c3:
38:9a:84:dc:85:71:58:2f:3a:ff:cf:8b:5d:50:3a:
f4:25:59:5a:76:66:07:e1:7a:59:e1:de:c1:70:c9:
95:99:df:68:e4:06:24:7f:7f:cc:d9:17:36:c0:8b:
98:be:fc:c9:f6:af:a4:df:ae:f5:3f:7a:81:ab:90:
07:16:5c:9d:bc:cb:8b:8d:55:d7:7d:9e:d4:23:ef:
cd:a4:6b:41:eb:2e:6b:b0:61:5e:92:26:7c:a5:bb:
dd:76:34:37:91:cb:35:87:a8:fb:98:14:70:b4:18:
ec:26:13:a9:6f:8f:34:00:03:d2:5f:a2:aa:ef:1e:
61:dc:1c:7c:09:b7:32:df:f5:8a:bb:ff:9a:52:71:
40:c9:84:e5:5f:41:99:c5:f4:14:f8:0d:7a:26:d9:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:E5:00:D7:98:7C:92:A2:14:D6:3C:47:1C:26:64:EC:D1:34:3F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:15:4d:60:d0:d5:48:4f:d0:d7:8e:c0:26:0b:de:b5:ae:49:
bc:ed:fc:c6:00:a8:fb:f9:66:6a:55:3b:90:56:d2:50:c5:94:
bb:6d:d7:02:65:de:c5:29:48:f7:2a:2d:da:2e:6d:61:29:4a:
a7:d0:75:ee:58:96:ff:fe:ac:71:6f:e9:39:27:f0:97:d2:e5:
e5:c0:5a:24:3e:4a:c1:74:ba:26:eb:05:51:a9:c6:a6:a0:c0:
e3:47:f9:25:62:2e:5c:c5:5f:af:cb:f2:44:e7:ef:7e:8e:bb:
8c:39:e5:48:8a:b7:bd:d2:8a:73:b8:7f:71:85:d5:e0:ca:6d:
33:5b:15:a9:df:48:ea:da:cd:d7:3f:12:91:5a:e0:76:dd:ab:
16:a7:24:08:66:db:ef:8d:07:cc:36:f9:69:4c:c7:28:f5:68:
5e:87:e1:cb:61:16:2a:fd:00:8a:a5:35:11:47:75:47:fc:f6:
b9:62:86:1f:1b:71:5a:48:08:b6:bb:ee:1e:20:cf:35:10:59:
78:d4:33:dd:9f:d2:e2:11:6c:13:c5:93:63:9b:0b:05:ea:fa:
2e:2d:0e:b8:87:11:7e:ca:43:44:fd:35:b2:d6:c2:d9:6c:b8:
5a:ca:26:f1:d9:da:7d:01:c1:df:50:9c:aa:0b:5d:cf:fa:a2:
f5:c9:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:22 2025 by rpki-client