Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
File: 8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa (raw, json)
Hash identifier: OgJZqWnbi5DNFytHD0iH2fZmVoxlM6xBDbwmSUdBE8E=
Subject key identifier: F3:6D:BF:99:59:4D:AE:8C:7D:E1:8C:72:D6:5C:E0:3C:C5:38:C1:2C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1BDCA216FAB11BE407CBCEFA73C3F522102E05CA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:dc:a2:16:fa:b1:1b:e4:07:cb:ce:fa:73:c3:f5:22:10:2e:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5c024894b84359ffa4458532bcb737b0fe0ee3bfd4a2110e4ab0a4b4f74210fa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:8e:a8:08:16:92:98:f5:67:ab:a3:7a:52:
45:eb:83:e7:11:cd:0a:4c:3d:89:93:7e:56:81:be:
2d:68:f2:6f:a3:85:8a:e4:59:d0:56:39:4c:d1:bb:
d5:0d:4c:5e:2c:c1:01:47:4e:a1:ce:d7:85:c6:44:
bb:08:c7:3d:e4:d5:f1:a5:fe:e0:ed:84:65:95:f2:
5c:9f:57:2e:a9:9e:4c:3a:69:87:c2:20:99:c9:1d:
a9:b6:88:2a:54:e6:87:6b:ea:ee:74:7a:fd:11:0f:
d0:30:a1:4b:e9:2f:1a:a5:86:38:77:9d:25:2d:b3:
5c:51:6a:f0:c4:45:5c:51:1a:b5:08:7e:eb:8f:f5:
e8:22:09:12:c1:d0:16:e6:7b:e0:c6:86:76:e8:ca:
20:8c:09:5a:38:3f:72:90:24:06:3e:0e:20:49:ec:
77:45:f4:c3:31:44:d1:cd:6a:6f:00:f5:f1:5e:26:
2e:9b:e5:5a:6c:46:30:cd:21:1f:00:b5:83:df:90:
ad:fe:02:9c:c3:ee:14:e8:30:0b:ec:ae:09:76:6e:
bc:98:e5:e8:a1:71:62:fd:c1:54:c9:2b:ce:24:76:
0e:ec:4e:b9:6c:d1:a8:79:13:71:05:00:b9:97:b8:
43:c5:f8:88:f4:56:b0:3f:46:f7:4b:e5:94:4a:1c:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6D:BF:99:59:4D:AE:8C:7D:E1:8C:72:D6:5C:E0:3C:C5:38:C1:2C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a7:c6:12:39:4d:a8:3d:67:aa:08:1a:70:e4:c0:a3:58:6b:53:
45:9a:77:7d:06:e1:c7:e5:05:21:42:96:3e:82:01:60:90:44:
4f:63:26:3f:68:1f:8a:f8:8c:b3:86:3b:2f:b1:2f:e4:18:9f:
69:e4:f8:80:ce:07:e0:58:8c:0d:c0:74:e2:23:f6:ac:57:a8:
8d:51:30:5f:9b:f3:a5:f2:03:8d:45:3c:dd:0b:0f:2f:c7:59:
ea:d5:56:d8:e4:b4:2d:2a:07:d9:70:05:e3:8a:be:6a:31:84:
2b:e4:fc:ef:e8:ef:a5:0a:78:88:f7:a4:e3:82:19:e3:61:aa:
06:f1:07:98:1a:e1:a5:50:04:01:74:bd:a8:fe:c8:73:64:e9:
fb:e5:60:7c:7d:5e:56:c9:a8:df:25:38:2e:bb:31:31:e8:b2:
65:4a:98:1c:12:d9:80:be:a6:b8:a5:0c:b9:7a:3a:ce:da:bf:
5d:3c:cb:ea:41:11:39:eb:71:08:4e:1c:fd:77:8d:11:ba:9a:
c1:0b:7d:e8:31:60:93:b7:0b:91:07:d1:63:fd:34:1f:73:73:
50:e1:a8:c9:89:c4:8a:9a:f7:0a:52:37:00:42:12:83:df:9f:
f0:c0:89:29:68:2f:a3:f4:45:e3:a3:6b:08:09:1e:b3:a6:b3:
63:41:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:40 2025 by rpki-client