Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
File: 83d64fad-2f6b-441a-9079-e9e60d149aec.roa (raw, json)
Hash identifier: L+DyCLBelZkhZbbHGBoysdfcmxMvWeo44b0+v4JXRac=
Subject key identifier: 14:59:13:73:B9:D7:B1:37:46:C0:32:E2:E0:39:CC:64:C2:B9:DA:C0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5332C26992B26FB4926D2946A4F6543013C33283
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:32:c2:69:92:b2:6f:b4:92:6d:29:46:a4:f6:54:30:13:c3:32:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=ad940d2ce8e3d6a7f50dc03fb77ee376ad051634c871f33bfd68f4c505d956e7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:62:ef:98:99:b1:f8:9b:3e:81:45:e3:09:
bf:6f:64:6c:00:9f:20:54:ab:f6:af:27:28:f6:19:
bf:2f:81:7f:87:a7:ef:c9:2a:9d:92:1f:02:b1:5f:
e7:74:fc:57:b7:36:d1:ee:85:ef:ae:9f:dc:de:5b:
49:27:c9:93:74:ac:64:3f:9c:65:c1:b7:35:3b:e2:
c8:e7:65:29:d7:c1:c6:cb:82:87:13:b2:da:1f:ec:
57:91:f6:d7:5a:b7:d4:bb:4c:44:2d:d4:f8:6b:55:
33:ab:2e:01:b8:b1:d6:1b:a0:42:a1:96:a2:2f:c4:
17:4f:45:88:f2:6d:05:05:d0:fa:9c:63:cd:af:e7:
c8:ca:2d:2b:8a:dc:0d:41:7f:5b:a1:6c:fa:0e:3b:
5a:23:95:49:14:9f:bd:43:03:77:db:b9:69:e3:7a:
e5:43:fa:d8:28:41:ce:76:8f:a1:f2:8d:46:23:2e:
21:10:c5:a7:c1:2b:0d:a6:51:56:10:c5:dd:6d:8b:
18:3b:7b:ab:ea:fc:b2:f2:33:b9:ad:d4:18:8f:b9:
e1:14:9d:6d:39:3f:d1:23:ed:34:97:a3:e7:14:c5:
17:4e:e7:91:8f:0a:8b:77:6e:f5:41:6e:97:cd:da:
19:28:cf:d6:56:36:a8:68:71:62:0c:df:35:26:11:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:59:13:73:B9:D7:B1:37:46:C0:32:E2:E0:39:CC:64:C2:B9:DA:C0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:72:95:ef:90:15:7b:d9:36:c6:8b:a3:94:ab:bb:78:96:22:
58:88:72:66:74:56:ae:7b:c0:94:8e:c6:d4:b4:27:4c:e9:c8:
01:8c:86:c3:8b:03:2f:9b:7a:69:c4:cd:dc:9a:c6:1d:b8:cd:
db:6e:54:e5:fb:86:1f:14:26:66:66:e0:b8:76:9d:20:a6:49:
a0:11:03:cb:a7:91:7c:81:c0:1b:68:49:4a:fe:ff:6f:e0:00:
3e:4f:8b:fc:b2:24:84:c4:94:bb:a7:d8:3b:e9:25:60:64:45:
e7:c1:99:1d:32:94:7f:2d:96:fa:b1:97:2e:a0:ff:e3:17:99:
27:ed:fe:75:6b:0f:b3:29:24:cf:7f:ff:75:42:32:98:67:85:
41:91:05:bd:4a:eb:b0:95:e3:c4:5b:a2:80:8d:59:48:8c:4d:
38:0b:cd:4e:54:77:4b:ca:cd:1d:2c:3e:73:e6:48:0f:e7:ba:
96:24:bb:02:89:10:a2:a4:e0:09:a5:a7:34:a0:d5:a1:da:3c:
b4:1f:1e:99:74:7b:b5:2a:6c:cb:74:2c:77:2a:dc:aa:c6:4b:
79:f3:4a:7b:15:4d:be:dd:eb:98:46:c1:66:3c:95:b5:a8:2e:
cd:21:cb:6b:56:ba:24:0b:2c:7c:c1:24:aa:36:13:db:5b:49:
da:08:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:23 2025 by rpki-client