Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
File: ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa (raw, json)
Hash identifier: sXdTGSe/vD2lr4D2rgEzduFTyWrJ4DxaQBjhTwwWnbE=
Subject key identifier: C9:CB:B2:FC:F3:0F:CD:CA:BD:51:E5:13:F8:88:43:EF:22:7F:F8:05
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 70DDB25E052A342DA1E148AF7DDF9D9C18459014
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:dd:b2:5e:05:2a:34:2d:a1:e1:48:af:7d:df:9d:9c:18:45:90:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ca43f994bdada9ff856e670a54974fc723ea054dd59e4c83d07ed19ecd1dbcb0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:78:ef:5b:b7:c9:07:ad:70:69:33:db:6f:
03:59:ec:6a:96:3e:09:25:a4:be:85:1f:ff:b9:b9:
d6:15:81:7c:98:d5:09:ed:78:75:4b:72:9c:94:ae:
5f:01:7a:bc:73:3e:a0:31:11:37:40:2c:2b:3d:2e:
45:5e:f7:39:6b:56:04:e4:55:dc:b5:98:ce:c2:69:
5f:61:7b:f8:51:42:dc:9c:c5:5c:ea:48:5e:5e:0d:
b3:aa:86:5d:0b:35:07:ea:88:ad:4a:55:5f:e0:b8:
66:d8:f1:57:77:6d:7c:b7:b9:cc:81:f4:ca:70:fc:
36:9b:82:8c:d8:eb:88:f7:80:1d:93:d0:b8:a5:3f:
f4:0b:fd:06:71:c6:ff:73:ee:fe:04:b2:d5:0b:9a:
9c:96:af:af:d1:55:6b:4d:80:34:25:a1:b5:b6:62:
4f:ef:84:64:27:f2:95:7e:d4:f3:9c:56:1d:f8:bb:
ef:f1:76:4d:e0:c3:f4:9f:b4:ad:d4:7e:68:f3:e8:
07:59:ea:89:47:58:94:d4:f3:5e:ca:02:f9:0c:79:
ef:bc:56:9f:08:8f:1d:48:4a:4e:d4:cf:d3:4d:93:
46:14:97:0c:f7:f9:e8:3d:c2:a5:73:5a:84:a5:13:
42:d4:21:bb:1d:0a:7a:ae:a2:8f:ba:90:53:2e:13:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:B2:FC:F3:0F:CD:CA:BD:51:E5:13:F8:88:43:EF:22:7F:F8:05
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:44:d5:26:6a:b6:54:85:c1:05:49:db:9d:4a:ec:c5:6b:a0:
1e:12:ad:69:b3:eb:7c:1d:9c:6a:7f:95:f8:a3:a1:ef:62:60:
1b:4c:52:52:60:6f:eb:7f:eb:ae:33:68:3b:40:21:7f:84:d0:
e7:cf:76:88:05:bb:c5:ee:89:33:17:7d:12:34:29:21:fe:9d:
92:7b:74:89:22:e4:b7:1a:9e:88:a1:66:08:c9:9c:6c:d4:b8:
55:d4:1b:ba:7e:95:cd:95:dc:d3:e1:fa:6d:ac:c2:d2:3d:5f:
49:0f:9d:5b:be:b0:34:11:03:23:60:91:32:90:76:07:68:ba:
1c:62:22:12:b8:32:a1:54:0d:7b:87:19:ec:37:fc:5e:2b:00:
18:42:b8:81:6d:6c:11:c4:25:a7:04:7f:1f:c1:1b:31:92:43:
da:2e:48:3f:97:1d:5b:a3:c8:a9:af:14:d0:3f:58:4b:26:72:
a1:05:e1:fa:94:ea:17:4b:85:35:68:bd:43:23:1d:4b:aa:65:
f4:02:b5:2c:9f:24:f7:06:89:79:17:bb:54:af:a4:ba:d0:aa:
e7:d8:29:f2:6b:aa:92:0a:44:01:1f:04:7a:f4:22:64:2e:1f:
b6:23:e1:e3:75:51:37:91:54:e8:3f:13:13:0c:1d:d8:91:6c:
34:81:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:37 2025 by rpki-client