Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
File: c5b27928-f79b-49c0-80c5-88852eab11e3.roa (raw, json)
Hash identifier: U6zBh7pK9nQ8KouohmPr9Tyllk09NX2axl7KGZgTxw8=
Subject key identifier: 92:39:B7:19:46:F3:2D:CF:CB:B7:0A:FA:86:01:45:F4:A4:C1:9E:FD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B25C93B75EEEF4EEA80A738FB233406D8600885
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:25:c9:3b:75:ee:ef:4e:ea:80:a7:38:fb:23:34:06:d8:60:08:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6ed19cf2d228bc24537aacdec121c5c69563566128a0e8d6508f25a7700327c4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:89:08:14:7c:a0:ab:fb:c1:3e:a2:47:69:
c8:6b:db:ae:84:a9:9c:79:20:44:49:bb:a9:25:a1:
57:8d:e6:69:31:4a:b2:5d:19:9a:51:01:8f:03:99:
84:13:65:fd:8e:48:f4:01:97:0b:ee:02:5d:0a:60:
10:8c:1c:7f:6c:ee:cf:d1:d2:03:28:27:60:31:12:
b8:1c:cc:a9:03:a0:66:ab:d6:b9:fc:51:1a:92:1f:
6a:d5:94:d0:7e:36:fe:48:10:03:6b:e8:34:4d:aa:
00:c3:a6:5b:49:96:0d:3c:2e:8d:ff:31:03:d5:00:
0b:d6:b4:e5:de:cf:5c:70:a1:cf:97:16:36:16:00:
a5:7d:e4:cf:5f:43:2b:a5:28:fc:f7:dc:1c:3a:e5:
6a:c0:4c:17:4a:b8:6e:96:31:4f:1b:94:da:44:5c:
69:78:82:03:dd:87:0f:f7:a9:5d:37:b9:13:52:46:
3e:68:a7:3f:4f:b5:fd:21:2e:84:94:65:3d:41:e5:
73:cf:e3:c6:6a:21:e5:bc:a8:4d:de:bc:5e:bb:2a:
f1:eb:ee:86:50:17:b4:2d:8b:ca:cb:f8:a6:e9:32:
18:e9:d3:32:91:22:ff:2c:40:a1:a7:5c:b8:d4:01:
f2:8c:e9:8a:ec:cd:89:b8:63:fe:f9:23:3f:b4:9f:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:B7:19:46:F3:2D:CF:CB:B7:0A:FA:86:01:45:F4:A4:C1:9E:FD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
51:f7:bd:8b:e3:b9:99:19:14:a5:f8:5e:b7:cf:78:6c:30:c8:
d3:26:9e:2e:0e:6c:5e:a4:13:bf:c1:ea:21:9c:95:08:16:16:
d1:dc:a9:39:0e:dd:70:d3:a0:1c:31:e3:e7:3c:69:1a:93:b3:
94:16:5b:a9:01:e1:9a:b1:3b:dd:08:be:de:d3:9c:bb:a7:45:
20:43:aa:7d:6d:12:7d:92:cb:25:20:dc:9e:e6:99:b0:33:3d:
d7:38:41:82:a9:c8:95:bd:86:a6:eb:34:62:df:e2:74:0f:e6:
e7:ec:1b:e8:a9:8a:79:d4:b7:24:d5:a9:3d:ff:6d:28:7a:c5:
99:b8:d8:1a:70:15:ec:08:d0:b5:b9:90:ef:bb:23:39:9b:27:
d8:3c:17:f7:6d:b3:b7:f5:8f:b3:a6:ee:8c:06:0c:d3:eb:d2:
6d:e0:ad:74:8c:76:05:22:58:2b:3b:fc:90:34:7a:d2:51:ea:
37:e9:6f:af:d0:f9:53:96:f9:93:d2:be:14:e1:45:21:62:85:
55:6b:34:86:1e:8b:fe:0d:62:99:fb:33:53:84:d1:f5:1d:23:
f0:12:be:8c:2d:dc:37:d0:9a:8c:44:c7:1c:3d:64:d2:0c:f2:
93:67:02:2f:e3:cf:1e:eb:7f:43:bb:3a:8d:5d:c0:7d:b6:2b:
6e:af:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:41 2025 by rpki-client