Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
File: d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa (raw, json)
Hash identifier: xStzGaNvDIPU4bxZ49vnJCFg/gpCEhI2gMcKhWU5tkA=
Subject key identifier: 83:4F:E2:5C:83:28:AD:77:D2:1B:61:2A:56:BE:7F:EE:73:44:A2:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5ED2DBB7E5A223B465762E7404AD9EF3BC5F7623
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.110.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d2:db:b7:e5:a2:23:b4:65:76:2e:74:04:ad:9e:f3:bc:5f:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=33a89a3cb1b87e2b52527b0560c35df06855cd43f342493a1a030597f7ab490a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:15:90:66:6a:0e:ad:f8:2a:b2:1c:59:37:
9a:5e:ab:14:f3:a5:ab:20:86:a1:f5:1b:33:1c:f8:
f0:a4:a5:bc:84:f4:c5:bb:96:88:f4:9b:45:74:a1:
ff:63:d8:ca:05:f9:46:f7:10:50:1b:73:7a:44:57:
57:c0:be:ea:f4:b0:4a:40:35:4a:e2:8b:5b:f0:60:
db:63:e1:c1:c0:f7:6d:f7:50:bd:70:03:22:14:46:
b2:3b:89:36:08:db:73:1d:b6:25:f5:15:6f:73:f7:
28:37:dd:5c:d1:19:66:f8:e9:de:87:46:73:a0:6a:
7a:54:28:69:e9:21:68:4f:3f:d7:18:7e:9f:3f:f4:
a7:0c:7c:13:e0:2d:c8:fe:e4:1a:aa:78:8a:a3:bc:
b5:1d:26:4c:72:2e:33:26:49:e3:ed:b6:56:65:7f:
bd:f2:ab:2a:ae:da:56:e8:0d:96:e7:a8:7c:ab:df:
4c:d1:b1:ce:1b:37:25:ed:92:78:e2:28:6e:95:74:
d3:4f:6e:fd:2b:27:ef:c3:32:91:d1:ea:03:1e:d4:
31:5d:11:20:d6:6a:51:d8:f2:a8:01:1d:aa:dc:e4:
3e:e5:19:86:dd:7e:45:82:77:7f:27:02:05:1b:24:
5d:6f:dd:6e:22:17:21:3a:5e:cd:b2:62:7b:30:64:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:E2:5C:83:28:AD:77:D2:1B:61:2A:56:BE:7F:EE:73:44:A2:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:f2:dc:10:3d:28:e3:66:2e:4b:59:ea:8a:6d:71:9a:02:e8:
3d:c9:0b:55:94:08:8e:c9:c7:10:9b:c6:a7:83:fe:71:a5:35:
bb:43:15:df:5e:5e:72:77:f6:b2:ac:05:ab:4d:77:04:ec:43:
41:ca:03:41:62:df:80:b0:2d:42:c0:d9:27:98:5a:18:72:34:
66:9a:fc:cc:77:b2:9f:e3:7d:0e:0c:77:01:ad:67:32:79:f6:
e0:b2:4a:04:61:e7:88:6b:73:51:55:1e:4c:28:02:ef:c9:bd:
c7:da:22:ef:2f:bc:1c:91:0c:6e:d0:81:87:93:8a:9a:c6:4c:
ed:01:9e:f1:81:03:d2:1b:5a:e1:53:b1:56:c7:60:bf:68:a0:
03:29:d3:4e:21:7e:1e:b1:c9:c7:46:03:e7:c9:5b:87:35:c1:
7d:71:19:4a:e2:a0:9f:6a:0c:22:c5:e0:4d:a7:af:10:8e:58:
b9:0e:b6:d2:85:9d:aa:7e:66:69:a4:5a:f2:3f:ab:6b:57:47:
dc:33:ce:92:8c:67:06:2c:43:65:94:8d:8e:17:9f:2d:ec:8b:
4e:1b:81:c5:dc:d0:21:04:ff:f7:11:66:33:59:67:f3:03:38:
a1:72:b4:23:27:37:c6:39:24:6b:79:6c:17:fe:4b:61:6c:ab:
eb:02:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:11:30 2025 by rpki-client