Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa
File: 84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa (raw, json)
Hash identifier: oSU49XTaYsXG0FND0frBK4tAcDthhEyE94zukGWeZHc=
Subject key identifier: A6:07:0D:2F:64:D9:81:65:A7:21:F5:19:1B:B0:D3:3F:53:10:23:82
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20901B55D6EB9B03A02749309FFBBE2A25409258
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:90:1b:55:d6:eb:9b:03:a0:27:49:30:9f:fb:be:2a:25:40:92:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=8497cb639c9a605cde014074174f273020ca93eb8e504a6e26804f897bb6f135, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:ea:0c:12:11:1a:63:ed:d0:a8:a5:75:2e:
df:55:c3:e1:ad:7c:21:24:1f:a9:ea:9f:31:6c:66:
c4:6a:11:b6:de:f3:30:2d:94:c1:6e:19:27:2e:4a:
50:9d:c9:51:00:72:cb:73:b2:85:7a:d3:e2:11:b6:
89:e1:2f:eb:bb:0e:5d:fc:db:a8:73:5b:9b:09:b2:
6a:b6:fb:18:f6:2f:d7:5c:72:77:1b:70:90:ed:58:
37:7a:a2:95:f1:8d:34:75:45:48:6a:3c:d3:ef:b7:
d8:21:9e:03:ef:53:50:9f:84:a5:2f:f0:a4:0c:03:
d6:18:9b:c1:81:94:f8:fd:24:45:66:60:85:26:3f:
35:1f:60:7b:d5:f6:27:0d:b3:fd:38:3e:87:76:7b:
73:94:e1:5a:6b:5d:21:91:bb:e2:81:65:b4:22:26:
5b:50:8e:24:2a:81:b0:55:c1:dc:1d:0c:2a:67:1d:
4d:8a:b0:aa:71:94:cf:43:22:30:e6:16:4f:d0:1f:
24:d3:47:bc:1c:25:3e:33:73:2f:35:2d:bb:4d:15:
06:d0:fe:70:f3:6c:87:ec:42:a3:5d:63:fb:7d:15:
8e:e4:fa:df:ae:27:f7:ba:68:3a:e5:cb:1d:65:e9:
ef:aa:89:04:b0:17:d5:51:ce:14:47:df:10:a2:da:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:0D:2F:64:D9:81:65:A7:21:F5:19:1B:B0:D3:3F:53:10:23:82
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
aa:88:d2:f6:86:e1:3c:09:6c:0a:ba:05:45:d9:e6:f0:c0:a9:
8a:8b:f0:91:67:eb:c2:2c:a1:0c:4c:de:fc:ff:cd:6a:14:3b:
d9:a9:b5:fb:b8:5f:9a:23:96:c0:50:36:ac:5e:5a:22:71:ab:
b5:62:a2:d2:70:b5:79:d6:3a:9d:07:e2:d5:5a:10:e8:07:68:
15:c9:61:0e:8c:f2:34:e0:a2:5b:aa:e8:4c:77:42:9f:2f:2a:
6b:44:3e:83:40:cb:2a:88:23:99:35:2f:cd:b4:8d:61:09:cd:
90:3e:75:88:4c:3e:62:d0:bd:cc:43:9f:26:da:bc:4d:83:6c:
ad:56:60:82:16:8e:3b:49:a1:07:77:b2:a9:be:44:a5:ee:05:
04:79:05:9e:24:f4:a1:a9:7d:0e:5b:e4:11:7f:9d:74:88:6d:
d6:55:54:e3:21:e1:02:db:c4:2d:f7:62:82:c0:c1:17:59:30:
fd:b7:e0:c4:4a:6c:b7:13:c6:34:53:4a:96:1f:47:4b:7d:66:
87:b0:72:52:5f:8c:a0:98:f0:69:ef:45:de:2d:db:db:67:27:
07:75:fa:6e:0e:18:92:a1:67:2b:ed:20:f7:e8:51:89:7b:b2:
83:d6:32:1c:7e:02:8c:4d:8a:7a:ab:f7:cc:e2:da:b9:d5:fc:
8b:0c:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:03 2025 by rpki-client