Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa
File: 9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa (raw, json)
Hash identifier: VLQXC115iz2QZflQXSlz0/HbaePckIjr9kaPfswYEUU=
Subject key identifier: 95:B9:D3:E5:FA:D3:39:54:4C:D2:0E:32:84:95:E2:D2:88:34:42:3E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 547274F501CB7BE74EE8243FE2A4C332D3732976
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:72:74:f5:01:cb:7b:e7:4e:e8:24:3f:e2:a4:c3:32:d3:73:29:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ab91d8f4620db57da6e8932c860b8718927a27563dd28f96a9199404462deaba, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:44:76:53:86:07:7b:1b:59:05:cc:62:8e:
bb:c7:ea:a8:d5:69:75:cb:c0:57:71:58:13:70:17:
e9:2c:20:cc:e8:51:53:c5:a1:f2:2d:65:63:bd:e3:
c2:62:79:13:a8:30:ad:53:f3:8b:4a:d5:5f:9b:ff:
a2:f2:39:ea:ef:fe:48:44:9b:93:e9:1d:94:43:d5:
a7:9f:e7:0b:8d:ca:13:21:3f:12:c1:f4:b6:ec:34:
8c:23:db:db:fa:1e:7f:d5:6f:99:af:96:d9:56:d5:
16:12:f4:93:9e:ce:a1:45:e8:82:fb:a8:36:89:d1:
23:2b:c3:06:d8:34:39:a7:45:33:8e:73:d3:37:56:
20:d2:04:0a:23:cf:11:36:be:4b:f9:05:73:13:98:
62:9b:11:4c:97:71:21:50:23:06:b7:97:7a:fc:5b:
ba:04:ca:32:ac:72:66:86:cd:3a:f5:cf:59:28:1b:
09:f1:e7:35:b3:06:65:e4:bc:9e:0b:3b:48:e1:91:
ab:bd:7d:e9:cc:38:ea:cc:a2:77:74:c9:93:81:de:
a2:b5:3c:8a:c1:70:63:d7:45:ca:00:ef:a8:47:3b:
af:bf:b2:d2:cc:ad:dc:dd:2a:0d:c0:b5:a3:a5:31:
ec:2b:7b:8b:dd:16:4d:9a:c6:e2:76:f2:e7:7c:8b:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:D3:E5:FA:D3:39:54:4C:D2:0E:32:84:95:E2:D2:88:34:42:3E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:c5:07:bf:3f:53:59:4d:1b:33:dc:97:19:2e:ac:7e:45:72:
5c:94:d2:a4:7d:5c:e6:de:b9:15:1b:89:74:aa:e8:93:f6:96:
0d:89:88:67:e5:9f:cf:07:ea:da:1f:74:3e:a1:bd:98:da:4e:
73:31:0d:af:99:7d:c7:3b:56:10:86:a5:81:a9:88:80:25:1b:
8c:83:cd:52:b1:1a:83:61:98:f8:ba:81:90:e3:3d:d8:2f:14:
52:15:5a:41:02:ad:90:16:48:40:1d:22:6c:f8:95:f3:de:4f:
6e:d1:9f:81:6c:dc:63:2f:3e:51:05:d4:d1:1d:76:b2:30:6c:
1e:f3:1f:8f:1d:35:5f:b5:c0:81:79:18:b0:07:51:0a:35:03:
b6:6b:1a:bc:ce:63:49:de:55:70:12:25:35:b7:76:4b:18:8c:
15:fc:65:00:66:2f:72:a1:21:6f:6c:ef:b5:b4:c3:16:6c:71:
91:a4:88:9a:9b:d0:b6:b6:09:c9:4c:3a:b3:8e:ed:3c:ef:60:
1b:1c:64:32:74:d4:34:09:1c:26:e2:30:53:81:2f:cd:59:b1:
f1:43:27:ad:b5:45:d9:8a:af:03:1e:c9:d3:b8:16:51:4c:b1:
03:00:a7:a3:96:cd:39:fd:2e:77:2e:1f:73:04:07:9e:22:5b:
7d:57:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:32 2025 by rpki-client