Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
File: 9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa (raw, json)
Hash identifier: p0qq4glfVwEytze+WTy8GCzrQXxNgnJ+oPXjorerCl0=
Subject key identifier: CE:EF:34:C2:65:49:9B:07:B2:1C:EE:88:37:5A:8C:83:71:EA:13:99
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48A1AE570F04415AD648BEC10041F00806FA4405
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.188.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a1:ae:57:0f:04:41:5a:d6:48:be:c1:00:41:f0:08:06:fa:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6413560b0e310d6314160fdf0fec6dd3634e208bae7703057a88588cec85af33, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:f4:66:82:31:58:d0:03:dd:e3:b8:f3:44:
5d:43:f8:26:60:4b:bc:fd:e8:c1:b9:07:ca:b0:cb:
74:d6:8f:f8:fc:cf:3e:56:24:cf:2e:8d:2a:c9:0d:
00:77:4b:39:a3:70:9d:cd:f0:61:c3:7d:5a:3c:26:
be:75:74:69:5d:1c:2e:60:f7:25:d2:52:d5:84:b0:
32:b8:26:c4:c2:3e:b3:e4:b4:0f:d9:e4:78:43:37:
42:83:99:19:e6:f0:70:8f:87:60:64:ff:67:00:b3:
3b:83:1d:27:d7:e2:c8:e7:ee:00:d0:4b:98:5d:51:
bd:9f:d7:31:81:34:fe:a4:79:3a:f5:db:9f:93:8f:
1b:2d:de:6c:d5:a3:17:a6:3d:67:70:97:43:8b:5e:
27:ec:26:5a:10:7c:e2:1d:4e:c2:e4:41:7e:d1:be:
8b:0a:ef:92:43:be:11:15:ba:c4:d0:ba:2f:6b:60:
e7:4e:be:1b:62:40:54:e2:2b:ad:a2:d8:71:07:23:
e9:0c:ec:a2:6e:3c:ec:cd:45:ff:6c:ca:79:dd:80:
73:21:35:bd:62:7c:35:09:9d:b4:62:8a:9d:5d:05:
61:57:5b:4e:d7:67:d0:b1:52:b5:6e:34:56:aa:6a:
01:b0:47:62:25:ed:62:b0:c6:ad:d8:34:2c:16:d1:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:34:C2:65:49:9B:07:B2:1C:EE:88:37:5A:8C:83:71:EA:13:99
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.188.0.0/15
Signature Algorithm: sha256WithRSAEncryption
37:47:3b:e8:20:83:40:2a:9f:db:cb:aa:bc:24:08:0d:6d:c7:
8f:4c:2d:65:4b:ee:36:99:5e:b2:c1:19:a1:24:8e:2f:c4:28:
55:80:bc:f0:f8:24:ad:69:0b:03:d6:bb:b2:b4:01:72:ba:0c:
dd:2d:20:30:97:0c:eb:6e:7a:63:77:1e:9b:f6:ce:17:3c:ed:
0a:89:23:bc:42:bb:23:d1:24:22:9a:05:b3:20:1b:62:69:16:
79:89:a9:5a:5d:ed:17:f9:0d:2f:80:aa:b8:43:01:97:da:59:
af:d5:34:3a:77:cc:d4:21:3a:89:af:5a:3d:66:e5:a5:a4:ce:
cd:d0:7c:f7:f2:3a:ed:f3:6f:03:25:b0:21:06:1f:a9:74:27:
a0:2d:c9:00:c1:23:09:d3:d2:eb:8e:43:19:42:dc:11:2d:41:
60:44:10:ce:82:39:d6:f7:71:04:b0:a1:fb:82:98:94:58:bf:
49:9e:be:af:ed:74:8f:d8:b7:36:4e:0e:27:49:00:9f:aa:dd:
c2:52:b6:95:e0:c7:31:bd:6f:da:26:b8:ba:9a:2d:b2:1f:64:
84:78:36:9c:97:30:be:2d:55:de:89:4a:5c:12:3c:23:8c:fe:
2b:cd:88:11:66:2c:9d:78:ed:43:e8:46:d1:7d:ce:e9:42:00:
58:b0:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:02 2025 by rpki-client