Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cf51afdd-468d-4999-b2cd-4c6517505aee.roa
File: cf51afdd-468d-4999-b2cd-4c6517505aee.roa (raw, json)
Hash identifier: VBpo/bEnNecR9F1K4IBY35Kyyrgl5WoQGs56e5UIPKw=
Subject key identifier: FE:49:FD:BE:21:D2:A9:AD:F4:27:C0:90:21:AF:88:46:15:13:AF:8F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4CFFC8FF15E4B0FCEBF24BDFE736209F44FCB5A4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cf51afdd-468d-4999-b2cd-4c6517505aee.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ff:c8:ff:15:e4:b0:fc:eb:f2:4b:df:e7:36:20:9f:44:fc:b5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a9b8fe3cf3816c6e02ed223b913dd13dc8acf75508a0b1925d523f912e8860b0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:54:c1:47:11:41:ba:48:40:cc:51:1d:90:
37:0f:a9:d9:5e:9c:12:dc:2e:e3:bf:9a:60:0c:c4:
42:01:68:f2:8a:e2:de:8d:4c:19:06:dc:1c:1a:44:
51:ab:fe:32:ca:ba:19:b9:2d:df:80:ab:75:cb:65:
bd:22:9e:06:44:f3:13:83:4c:1e:51:e8:5b:5d:a4:
0c:56:06:e3:51:de:77:a7:1a:56:01:06:bb:bf:3c:
f3:37:fb:16:8b:7a:2a:0a:8c:83:b0:fe:c4:99:a2:
7c:36:be:d2:3e:9f:e4:ab:85:e3:4e:8b:8d:39:7f:
0c:7b:04:4f:9a:56:0e:59:c7:69:43:90:a4:18:1c:
f1:06:fe:e1:c1:f7:41:ea:1e:33:eb:76:9f:cc:6f:
fb:c9:62:ab:fb:0b:2e:2d:41:b8:53:9e:ba:b6:fe:
71:ef:a3:40:1d:37:96:9d:0f:33:a1:a7:7f:f7:8c:
12:dd:d7:c3:7c:74:12:f5:cb:42:03:47:b7:39:79:
aa:8d:d6:1e:28:9a:9d:cb:bc:52:5a:da:c3:ef:89:
cb:66:a2:7f:db:a8:d3:88:58:2d:b0:83:ef:58:33:
ea:8c:31:60:90:fa:46:54:0d:1b:3b:5f:2b:30:85:
e8:59:37:0d:6d:f6:d7:95:fa:99:e6:9c:a6:9d:98:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:FD:BE:21:D2:A9:AD:F4:27:C0:90:21:AF:88:46:15:13:AF:8F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cf51afdd-468d-4999-b2cd-4c6517505aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c6:57:33:2e:db:45:b7:1d:14:d0:63:ff:29:00:c6:d3:22:f5:
0f:f5:1f:c6:b3:04:51:0a:4d:b2:3a:e0:d1:14:10:e5:d4:93:
e1:73:10:3b:22:c6:d4:53:3d:8c:cb:8e:11:d1:0a:b1:ca:79:
7a:85:66:79:c7:b6:11:b7:6c:bd:ea:d2:4e:77:13:12:1c:e9:
d3:ca:93:47:a8:f0:2a:7b:57:8b:66:66:3b:e2:44:a1:af:db:
10:44:be:e5:dd:77:24:ba:32:15:eb:3c:8b:5f:98:36:05:e0:
f5:66:20:b3:17:e4:13:10:db:53:70:57:60:be:be:29:7d:cd:
65:88:9f:98:1a:fd:19:64:38:c5:6a:80:22:a4:55:a0:2d:eb:
80:25:e3:1e:92:c0:30:15:ba:29:54:b6:cb:1c:56:15:3f:7f:
f6:40:44:1e:6f:37:13:7b:2c:90:f0:c7:06:c3:0b:8b:fa:61:
b0:34:0b:18:e4:60:15:f3:29:7d:a4:a3:3b:c0:bd:76:7c:cc:
89:f3:e5:f2:2d:0e:1f:52:b1:a7:88:9e:2d:43:7d:d2:5a:f1:
6b:f7:76:8f:8e:01:16:72:ff:90:5c:a5:70:02:12:69:89:73:
1e:81:fd:b3:44:89:8e:5a:32:c1:c5:a5:86:1e:fe:7c:d3:2e:
88:c9:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:49 2025 by rpki-client