Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
File: 9adb83e6-fa36-47fa-b5be-856fd7247898.roa (raw, json)
Hash identifier: VA/VP1mimPFvIGgnFJkWJjWO+tKk8wZiHpBLf9KrwqQ=
Subject key identifier: 06:BB:5A:0E:2C:5D:44:93:F0:D0:E7:5C:DD:48:44:D8:E9:FB:9E:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 381D52BB1D64204422263B772A0A853BA9DA0335
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1d:52:bb:1d:64:20:44:22:26:3b:77:2a:0a:85:3b:a9:da:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=9ec78e9de3c6371c832a1307b535ca616fc045ccd8ac6caac769cf6e07812363, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:f2:52:80:aa:ea:fb:ba:02:16:4f:69:45:
cc:48:73:87:97:d5:0d:d0:e0:31:24:f1:43:e7:ee:
c6:3f:94:43:26:c5:11:83:8a:b0:7b:db:5f:6d:79:
08:e6:df:63:b9:26:6f:cb:3c:09:f6:ce:3f:f0:06:
10:be:70:e7:e7:93:51:5f:ad:34:9b:41:62:26:7e:
6b:69:3d:66:5e:2c:96:8f:8d:39:a3:9e:79:f3:90:
c0:af:cf:23:78:b5:8a:34:5c:1d:71:9f:ea:81:76:
60:da:b8:5c:e1:8b:dc:34:21:11:bf:cc:fb:0d:62:
98:0d:df:fd:18:bf:27:07:bb:86:1c:e9:d0:d6:e5:
0d:a0:1d:f9:78:55:5b:2d:ef:e6:fa:a6:6d:04:c6:
f6:5a:7e:a4:26:9e:47:e5:0b:f2:12:33:0f:f5:7c:
ab:84:0f:82:5a:a1:e0:ac:eb:3c:6b:1d:74:59:48:
2a:4d:5d:7a:3e:df:f4:29:79:40:b5:34:dd:5f:8e:
53:c9:2f:43:d4:48:96:5b:3d:98:4b:86:6d:b9:8e:
3d:44:c0:98:6c:af:3f:1c:18:f1:5d:07:f2:f4:d7:
69:04:6b:9a:ea:6c:4d:f9:bc:b1:23:70:fb:86:1d:
f3:c3:1d:71:94:99:6e:e6:35:b1:8a:11:74:5e:34:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:5A:0E:2C:5D:44:93:F0:D0:E7:5C:DD:48:44:D8:E9:FB:9E:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.104.0/23
Signature Algorithm: sha256WithRSAEncryption
80:37:97:9c:e1:b8:1a:b3:8d:e9:2d:86:ed:28:a6:3c:b1:88:
7b:9f:5a:ff:32:7a:75:1b:3b:20:97:c4:24:16:5b:e5:46:00:
a7:a6:c2:25:07:9f:a1:ca:36:cb:df:22:38:06:4e:78:b1:47:
85:d3:3d:2d:46:37:b4:1c:f9:7c:3a:45:43:4a:c7:e8:99:6d:
57:2b:3c:66:52:d5:10:86:62:e4:3f:18:55:9d:46:e7:df:d9:
05:fa:13:44:d0:ab:33:2f:ef:31:0f:a8:ff:da:cb:58:09:ff:
ee:a6:98:14:29:35:99:32:ce:cd:03:d8:3a:b1:a4:63:03:10:
b7:60:4b:1b:bd:0a:40:8f:40:a7:9d:7c:d4:2b:2c:67:44:62:
43:d8:89:af:e9:9e:47:89:06:fe:70:12:42:f7:f0:ec:f2:05:
38:91:d0:0d:de:f7:28:9b:89:a2:ae:23:be:92:47:4e:3d:79:
21:c5:f6:6d:c9:71:3a:7e:f8:b4:33:f0:7a:a2:90:03:3c:82:
eb:35:11:f3:a6:a1:13:39:fc:87:71:31:0d:82:4b:42:b7:18:
a6:e2:fe:ac:a0:e6:21:3e:3f:f4:d3:9e:32:46:65:d2:f9:d6:
8d:9f:90:92:3c:30:5c:42:97:78:7c:f1:cb:3a:57:b5:0a:b3:
43:69:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:03:38 2025 by rpki-client