Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
File: 7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa (raw, json)
Hash identifier: Y4ILX/+0kbnvBfiwlOKRMeQAnYe1jDo0QbnqP6OiSro=
Subject key identifier: 34:D7:2E:A4:03:0B:F4:74:AC:04:03:48:CC:30:E2:8C:77:6D:E6:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3405DB1E61CB74E986B4C09C79B846C5D6D73479
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:05:db:1e:61:cb:74:e9:86:b4:c0:9c:79:b8:46:c5:d6:d7:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=edf94b9837faecfc550d0c85b7fcb42afc5f1f3f281fb50b08bcf0a9b53f202a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:fa:9c:1b:6a:a3:fd:9c:45:19:90:27:22:
ba:e8:05:6a:aa:01:7a:43:8b:27:fb:84:26:c8:b6:
fe:f2:bf:e9:b0:d3:a3:45:1f:7f:8d:95:b0:bc:6b:
cb:e3:c8:c8:06:eb:49:05:f7:94:95:66:43:ee:c4:
a4:55:51:23:a2:aa:ab:9a:0f:97:b9:3b:67:84:1a:
d3:49:96:08:31:f5:98:96:a9:05:ae:af:ac:61:80:
5b:8e:d3:62:a9:e6:8d:5b:57:7d:c9:3a:e2:dd:9d:
b4:26:59:c2:5a:ee:5e:0d:e5:07:4e:d1:fc:fd:49:
54:5b:3c:c7:a2:44:f6:3a:6b:32:73:91:2e:b0:aa:
76:28:3b:02:54:22:5b:fb:04:1c:cd:09:c0:01:87:
76:74:5e:32:1d:79:03:85:69:b1:3f:7a:1a:22:c0:
0f:69:d8:f5:3a:ce:de:0e:39:cc:55:00:66:76:4a:
35:5e:b0:0f:c2:6a:b9:b2:e8:d4:53:fe:e5:fe:da:
77:69:07:fd:21:fb:e5:0d:6b:71:41:7e:3d:a0:90:
71:bf:4e:ce:15:e7:9c:96:d9:22:7d:46:d8:36:97:
6f:67:a3:71:10:3a:08:b2:dd:10:0d:64:76:7e:bf:
aa:ce:0f:3f:63:1e:82:fe:4d:cb:2e:b6:31:be:7e:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:2E:A4:03:0B:F4:74:AC:04:03:48:CC:30:E2:8C:77:6D:E6:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:13:e8:22:a0:9d:0a:6a:7f:11:d8:91:69:f1:fd:39:94:ae:
b1:c0:53:a4:8c:76:06:c9:63:a3:4c:3e:8b:12:6f:94:c3:96:
1f:64:48:cc:b4:39:38:7a:ca:1b:ea:1b:01:6e:e3:aa:56:14:
d4:30:7c:32:a8:4e:aa:ae:04:19:da:36:55:8e:c8:ee:7a:8f:
de:c4:be:a9:f3:f5:cb:c9:e2:80:b0:9e:9b:cb:1e:ae:2e:45:
05:ed:fe:34:e8:a3:0b:85:19:e9:ef:aa:63:4f:0f:86:a1:b2:
a0:2e:73:30:1b:14:f5:5d:54:07:92:15:c8:cc:a8:0e:6c:9c:
a1:30:38:37:27:17:76:c0:76:7f:66:58:de:98:94:6a:59:5c:
76:43:ca:0f:a1:ca:47:70:56:55:d9:f0:f4:d0:cb:60:41:3a:
8a:e4:57:50:cc:79:8e:0b:fc:ca:19:70:8a:a3:d8:41:9a:c3:
b6:57:3d:30:2d:99:53:b6:9a:4a:86:6b:63:2f:b8:49:99:ac:
fb:73:ee:0f:9c:15:0f:0c:50:5e:77:3c:3e:14:c6:8b:23:56:
fc:d6:05:0a:98:c1:df:20:25:7c:ff:5f:8c:ad:87:42:db:0d:
8b:10:be:78:9c:ea:3e:cd:f6:1a:dc:5c:02:e7:a7:35:41:14:
50:e5:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:22 2025 by rpki-client