Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
File: 8d2d588e-ac05-4633-acba-4d5705f7071e.roa (raw, json)
Hash identifier: 7uBgI3AovQWqUwUiyu+5PTdjalRUKtE+HimMMPNm3Zs=
Subject key identifier: 4A:20:78:8B:AF:93:E7:5F:3D:FF:61:C0:DE:08:77:1A:9F:E1:FE:16
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 76BECDFDE454D37A0AB03A6B9B0F51DD7B0740B2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:be:cd:fd:e4:54:d3:7a:0a:b0:3a:6b:9b:0f:51:dd:7b:07:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=236724ef0cfba388790bed2c3e56ce221f16d3660f0c813e685cfbc62f954228, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:27:d9:e0:ad:73:48:cc:2e:ec:04:e4:fd:
57:28:ec:dd:8d:ae:fd:7e:f5:b6:a1:aa:c7:81:01:
35:f0:db:33:fa:be:69:6f:cf:89:e3:31:97:7f:e7:
1c:04:b2:e1:18:b0:8e:14:6e:ee:6c:fc:87:0a:3c:
5a:b2:ce:b3:65:a1:c6:41:19:76:4e:9c:87:7c:bb:
bf:93:75:2e:16:f3:51:54:55:d3:dc:05:89:f2:38:
71:39:76:47:78:f4:de:ef:26:a6:d3:8c:a5:36:51:
5d:de:e7:46:fa:92:13:1d:af:0e:e7:d8:c5:9e:75:
c2:af:88:a0:e2:41:3b:d3:d6:98:7d:47:3a:d0:95:
d1:6f:ed:61:87:68:44:eb:1b:b1:1d:ef:2f:18:9a:
e7:fa:57:ca:12:be:d3:38:de:66:11:0f:d2:34:3c:
28:9b:88:39:e7:e1:86:9c:9a:ae:f2:bd:aa:36:fd:
10:15:2d:c6:79:29:8a:9f:9c:1a:dc:72:8b:20:31:
4b:37:e7:f0:83:24:b3:e8:9f:a8:bc:d1:ac:fa:a5:
9e:ac:15:78:f1:d6:70:58:63:0d:07:4c:71:09:f8:
6b:9b:f4:1c:c7:89:be:a7:f7:1d:22:f7:14:23:18:
15:1b:4f:2c:fa:7c:34:02:34:c7:ad:b0:54:b4:82:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:78:8B:AF:93:E7:5F:3D:FF:61:C0:DE:08:77:1A:9F:E1:FE:16
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
91:da:df:5f:41:21:5e:76:30:7d:04:72:5a:91:87:86:6e:97:
91:4f:ac:51:db:16:78:6c:f5:a4:66:83:15:13:da:9f:c0:d5:
aa:79:86:70:c8:03:e1:4e:90:61:05:3a:5b:ec:28:9e:ba:cd:
3e:82:ed:35:31:d7:6e:b0:67:9c:4b:cc:a4:98:ba:5e:81:70:
b7:14:5c:5c:f8:45:e2:78:ff:fa:80:98:e4:aa:7e:2e:69:5e:
94:5b:3b:4a:b2:2b:10:72:56:b5:5a:28:93:9a:87:0d:d1:2a:
24:19:9d:dc:29:7b:30:8a:91:4c:36:36:cf:64:0b:0d:2b:49:
48:7c:72:50:86:f7:05:db:9c:7d:71:3c:85:ad:b0:59:c8:c7:
1e:5b:0b:8e:c8:7e:88:ff:b5:04:7d:23:33:9f:c5:26:14:35:
84:d1:75:75:d5:f0:8e:8d:44:c6:5c:b7:58:1c:1c:3d:aa:5e:
68:b0:c4:20:23:68:f8:7c:a2:25:ce:5b:76:b2:fc:b9:7e:67:
6b:c4:8c:0b:5d:8b:75:64:00:a1:27:cf:0a:ab:cb:5c:e5:f3:
fd:56:0c:09:3b:22:f7:b5:e4:b2:63:70:25:f7:8f:cb:18:b1:
6c:b0:f9:6c:6b:b7:8a:73:5f:10:f6:5a:37:b1:09:6c:37:d1:
c7:97:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:18 2025 by rpki-client