Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
File: af8582f5-d209-4e12-aacf-31186289c430.roa (raw, json)
Hash identifier: ryxmFTDRGeqvVt2FXe8YwefkTT2/m/w2mBcrppdWmTU=
Subject key identifier: E7:BD:0B:90:CF:40:EF:72:E0:CC:8D:88:6D:A2:68:C0:85:0D:98:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47A981B76F358CE25BAAC39C5BE1FBB531E4E7D8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a9:81:b7:6f:35:8c:e2:5b:aa:c3:9c:5b:e1:fb:b5:31:e4:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f49181ae2df9f7701b9cd552f95e9c12e556a69e6a5aa9a77b6910585d5c85c4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:13:49:40:37:3c:fa:c3:5a:07:9e:49:c4:
54:2c:6a:a1:23:cb:6e:91:78:9c:8e:53:9c:66:e5:
71:69:26:eb:63:74:80:7f:5d:8e:db:ba:b5:57:e7:
3b:dd:be:f0:72:98:ce:eb:0a:e8:7f:fa:f6:05:9d:
97:fe:7c:78:b4:74:00:82:af:f4:2c:50:d9:ed:f8:
f3:4a:0d:f0:26:96:cf:fc:f0:2f:7c:cc:cd:38:19:
5f:00:64:7a:71:94:60:2d:f6:f8:a5:ce:7e:37:f3:
49:01:15:36:18:2f:2e:7c:f5:cf:46:9e:d9:09:b8:
d2:ef:8b:b9:f9:e9:4e:4b:34:cd:8c:61:93:b2:ca:
cd:28:4b:a7:13:6e:73:e8:a4:f5:57:27:65:87:6c:
17:d4:c3:1a:45:ae:09:30:2d:7f:ab:61:f7:c7:49:
ae:00:71:27:6f:2d:47:c4:86:ff:95:e1:c2:ca:e1:
2b:ab:1e:21:8d:2d:aa:b8:d6:7b:fe:ff:5d:42:0e:
8e:41:e6:17:1e:d8:54:e3:ec:d4:be:f8:5e:9b:1a:
85:14:68:0a:06:a8:28:55:bc:93:b4:5b:ab:6d:1e:
b1:cd:65:76:5f:d0:e5:6c:c2:3e:dc:b1:5d:73:93:
97:ea:69:2c:74:5d:e9:4a:92:7a:34:d0:29:d0:38:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:0B:90:CF:40:EF:72:E0:CC:8D:88:6D:A2:68:C0:85:0D:98:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
07:34:d5:c9:16:b4:4a:52:d8:36:57:35:f9:5d:9b:8d:98:c0:
ad:a2:06:a5:1c:00:e5:e2:6b:62:ce:46:6f:cb:f1:9a:75:c1:
b9:34:a6:58:ae:b6:93:03:b9:e1:fa:19:b1:0d:c6:f7:91:af:
85:a6:98:12:0b:93:43:e0:fc:03:bc:7d:b0:bd:99:79:9c:cd:
4e:04:79:3f:3a:9a:a4:9d:8c:87:87:4f:bc:d1:cd:26:b6:9b:
5e:fe:b5:a4:ce:37:c1:0a:26:47:d8:7a:90:e2:0c:88:0c:4f:
42:c8:ec:4e:ac:96:5b:62:88:04:fd:6b:b4:54:bb:45:a1:33:
01:71:1f:f5:c2:0e:2a:14:c9:12:5c:ff:15:e9:de:7e:23:9b:
c1:84:fa:51:30:5d:84:d0:1e:82:fd:d4:2d:e4:c5:fe:a4:07:
e6:92:ac:f7:d5:35:f7:3a:45:e6:37:52:11:76:af:ed:c1:3d:
9c:0b:06:df:02:81:e9:b5:10:f7:75:a8:4c:14:fe:54:0d:c1:
97:60:d7:3a:c7:68:1d:f7:d2:6e:4c:86:cf:3c:20:fc:36:25:
e3:fd:fe:f6:ed:aa:81:d6:ac:06:e6:00:ce:75:13:45:90:fc:
20:f0:07:38:01:78:93:ba:d5:15:59:b7:6f:2e:b1:2a:76:fa:
da:13:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:48 2025 by rpki-client