Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
File: 993731a0-abe8-41b9-bad3-ce7852d4f117.roa (raw, json)
Hash identifier: ksJr3MHaqLH2/DC0g1+GdE9GonbrRIQ+A1OuXjaOXP8=
Subject key identifier: F1:7B:C1:9C:D2:3B:05:C8:D4:82:D9:2C:0E:91:9D:3E:37:03:4F:4F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4EDDAC8FE257E9B9C2728BC1B0C5C91272DDF551
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.34.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:dd:ac:8f:e2:57:e9:b9:c2:72:8b:c1:b0:c5:c9:12:72:dd:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=edeffcd962695f2aaf095f116099094556305d2b8178622330b4de0447615c16, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:f3:d3:5b:bf:0c:20:5b:36:42:ff:74:a7:
79:37:a7:f7:51:d8:6f:84:36:7a:8e:a2:53:4c:0d:
c0:8d:cd:79:a2:ce:88:91:4e:a1:f3:b5:21:25:ba:
2a:8b:fc:5d:ca:9e:ef:05:2f:46:f9:ca:a4:d5:c2:
30:29:dc:1b:cd:b3:bf:c9:4a:43:5d:e0:e7:35:db:
01:9a:87:19:09:4c:84:f1:88:97:b6:b8:d2:40:49:
c4:b1:75:b4:2b:25:db:d3:16:22:cf:85:72:bf:50:
07:15:c6:ee:56:43:05:65:57:d0:d6:39:6d:4a:0e:
72:2a:3d:8e:c9:70:fa:47:d2:87:16:5e:3e:9e:6b:
41:a2:53:97:42:2a:8c:68:27:f9:a2:72:ab:89:4b:
f1:9f:8f:14:94:a3:35:46:8c:4b:d4:ea:41:e3:9b:
a2:2c:d2:b8:bb:2c:98:a8:da:64:c1:0f:ce:79:d7:
1d:4f:46:37:f6:f1:6c:1e:01:84:45:54:82:33:2c:
2e:1c:ba:f5:85:46:ce:f2:bf:8d:e4:a3:45:7e:5c:
56:6d:bf:df:9d:ef:1c:ad:ca:62:80:04:3e:4a:a3:
e1:6b:4c:8f:6c:84:26:bd:12:93:ee:11:cf:35:71:
99:58:54:49:72:45:94:fb:2c:45:33:04:6f:c0:ba:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:C1:9C:D2:3B:05:C8:D4:82:D9:2C:0E:91:9D:3E:37:03:4F:4F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
55:78:c7:e4:df:b1:2a:b8:29:83:ae:fe:c9:3b:e7:73:ff:22:
ad:a6:09:2d:4d:bb:82:1d:ed:47:b4:1c:43:79:80:3c:09:a4:
ec:91:ed:3c:bb:24:78:42:fb:15:57:39:b4:be:cb:87:16:f2:
50:28:84:2d:ac:ae:83:4c:73:3c:0d:e6:90:22:e5:9f:db:f2:
56:69:fe:01:ba:f9:70:79:4b:72:4c:85:01:91:c9:f8:f7:c4:
f9:8c:e6:a0:43:5d:5c:4f:89:29:94:f0:f8:a2:a0:82:44:68:
05:28:0b:8f:a0:3c:bd:78:18:ed:f5:de:6e:47:80:85:1d:ce:
67:4b:76:5d:a5:a8:bc:bd:db:94:08:a0:71:f9:90:e2:ba:9f:
17:3a:ca:67:2c:2c:6d:c5:ce:5b:56:86:f7:e1:53:fb:59:3e:
0a:7a:1b:9c:f8:b0:31:27:40:88:8d:60:92:bf:57:0e:e8:e0:
af:18:f9:9b:46:33:0f:37:de:0e:0a:58:59:90:a5:c9:d3:43:
e0:ae:3a:02:31:ff:3d:7d:be:9a:ea:f9:ac:6f:e8:67:59:cc:
56:70:59:87:f9:a1:7f:56:bd:41:e5:dc:70:3d:9b:c6:c4:d6:
34:7a:85:51:f8:93:be:8d:b2:ad:09:b7:ab:c8:e1:9a:2e:1f:
40:e4:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:28 2025 by rpki-client