Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: OU8fmgJYg6E4S0yeztJUf7hf01FhiPNKxmE+DFR2Jes=
Subject key identifier: 8D:7C:EB:97:9C:11:3F:60:D0:F6:81:65:A2:59:A9:E7:5F:41:5F:40
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1ECD8AFE8F05785059D9DF95008C1F21F6276E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:cd:8a:fe:8f:05:78:50:59:d9:df:95:00:8c:1f:21:f6:27:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=af2eb8951d4ece511dd24b1f658bab1ceb8b44d973a22f2fcd97b8c155f70fde, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:a6:a2:e6:29:b8:de:14:dd:bd:a1:2c:8f:
b4:b0:ed:14:e8:96:23:c9:fb:66:57:96:05:f3:6f:
4c:27:b4:e3:8d:09:bd:46:89:d3:1e:5e:b2:7d:c4:
48:48:d3:c6:9d:3c:d6:5c:de:19:85:c0:e2:9f:4a:
b0:7d:0e:85:30:80:6d:05:71:0e:9c:a3:61:db:f0:
2a:0c:ab:64:a9:86:90:d4:ad:84:a4:71:79:ab:fe:
05:63:d5:fe:a9:ed:78:20:b0:70:15:34:65:b9:e5:
0b:84:7e:ff:50:c0:6f:63:01:64:da:ed:b7:e0:b6:
2f:a9:cf:9a:aa:58:2a:42:c0:8f:5c:63:ff:c8:b8:
3f:74:ea:01:34:4c:fd:fd:ae:d9:f2:64:65:58:c2:
67:e1:28:9e:d1:da:2a:62:2c:55:e4:81:a5:c1:17:
58:49:7e:91:1f:ca:6b:93:97:f6:7c:6a:e0:58:59:
41:17:5a:b6:2f:79:cf:19:05:3c:5f:f6:ad:c9:44:
bc:55:9c:c8:5f:98:f4:e5:6b:14:95:22:bf:57:19:
28:bd:ac:2a:e8:aa:a6:03:b2:f6:09:00:f5:77:18:
ef:a7:86:c4:92:e6:5e:b1:47:34:42:b0:a3:2c:6d:
a1:f1:f6:f6:99:b1:0d:04:57:d9:d8:3a:1a:3f:bb:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:EB:97:9C:11:3F:60:D0:F6:81:65:A2:59:A9:E7:5F:41:5F:40
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:d3:e5:e9:f6:ee:c0:e4:b3:f5:66:fc:ec:f9:2b:c7:9a:9a:
ac:6b:d4:b6:7e:2b:a3:63:ef:8f:8d:e4:51:11:f9:26:25:dc:
e0:e0:01:3b:49:0a:72:e8:38:8a:8d:6e:4c:c2:81:bb:86:10:
8a:43:06:b0:fd:58:57:4d:46:af:b5:b8:9b:49:08:04:4f:34:
e1:56:16:da:24:0f:4d:75:29:03:23:0d:a0:06:e2:51:31:63:
1b:de:c4:a0:43:ac:17:21:b9:e2:32:3e:be:99:2c:95:59:6c:
a2:01:2d:72:7f:29:5b:5e:30:c2:94:ad:3f:2f:c4:a9:54:10:
fb:85:13:4e:a9:03:d8:01:c0:63:5e:97:f1:01:ce:06:d5:bf:
94:c1:69:1c:77:e4:52:b8:4f:43:af:95:cb:11:f2:04:58:1d:
4f:41:b2:b8:13:77:be:52:9c:c7:c6:91:90:dd:a7:3c:dc:86:
1a:74:d1:50:ec:aa:2f:be:8a:80:27:4d:4e:56:b2:53:4a:d8:
5e:d9:e7:63:18:83:84:42:47:3b:60:04:05:4a:9c:bc:21:3f:
c7:cf:68:0c:59:36:90:2a:aa:25:41:55:17:be:7f:8f:59:7d:
2d:74:28:ec:40:e2:47:6a:8e:31:26:29:2e:4a:12:af:d6:9b:
85:a9:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:34 2025 by rpki-client