Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa
File: dc5d2309-ce0f-4816-b8d0-260ce079f694.roa (raw, json)
Hash identifier: JfS/8cfPWLHKWV3Sy5mzUzzCrhoqkFeUqoGu/GBNHNU=
Subject key identifier: 0F:E2:CF:CF:22:1F:E4:FB:88:5C:B9:83:24:20:F6:7E:2B:04:DB:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1D3E83DEA7EFEBC43EBB983AF05F2C4C619D058B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 212.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3e:83:de:a7:ef:eb:c4:3e:bb:98:3a:f0:5f:2c:4c:61:9d:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=feeceb412edbb0ed45c5e0ebba02373250d891b05f5a5ce4c02c4260b8e248e9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:84:33:d1:16:6d:00:8f:75:20:0c:c7:f3:
01:b8:9e:58:1a:a8:38:31:4e:21:95:11:ca:cc:64:
a2:a6:5b:0e:4f:e4:63:a5:2f:44:2c:92:04:0b:fc:
28:4d:01:e8:5a:d7:67:84:6e:41:c9:7e:6f:ca:49:
49:8c:63:e2:98:9a:67:9f:4c:8c:84:c2:9f:c8:65:
16:bf:9b:b3:40:7d:c1:0c:95:d7:d7:1e:f1:2b:cb:
d6:25:41:23:a5:72:fd:c3:61:f5:cc:97:0d:9c:64:
62:60:e9:53:69:ce:f8:1f:15:0a:03:55:9c:b7:72:
c8:0d:19:bf:e3:f1:bd:3c:1c:14:cf:02:6b:c1:d8:
f4:f0:d9:78:78:91:f3:59:a4:a6:99:36:49:15:99:
d4:66:ff:78:60:e7:67:ed:5e:67:55:e0:4d:f4:3c:
e3:57:f2:be:fb:8b:87:43:af:b3:db:4d:c4:e6:bd:
dd:a7:db:13:4e:e5:4f:8f:1e:f6:32:6f:48:1f:6f:
5b:a2:ad:69:8c:69:ab:f3:67:91:06:64:f1:36:69:
f6:d5:9d:38:c8:6c:68:f9:66:11:b2:dd:60:6c:1d:
eb:ea:d1:99:7d:6e:cd:1b:1e:e1:a1:06:aa:a3:d7:
b2:a9:57:c2:31:87:c5:e5:c0:3b:bb:65:ce:46:cf:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:CF:CF:22:1F:E4:FB:88:5C:B9:83:24:20:F6:7E:2B:04:DB:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:86:59:19:e8:c4:a1:2b:46:43:84:bc:d0:9c:4c:ee:54:50:
54:cb:c4:8a:66:a2:1b:c8:05:db:74:6a:62:d3:a3:7c:27:f8:
c1:c9:65:ab:4f:30:9b:93:ef:4e:20:6d:d9:05:3f:98:67:5c:
81:93:51:74:e2:f3:e0:87:24:6d:83:eb:5c:b1:3b:82:5d:29:
63:a5:71:a2:70:e0:f7:0d:37:57:71:3b:38:16:7b:d6:66:30:
26:5f:fc:5b:3e:17:31:d0:ac:f1:d4:af:99:13:fb:03:03:22:
71:07:9b:08:9e:e8:06:45:06:73:72:b2:3b:9f:19:a0:98:cf:
e9:67:7f:10:b3:66:4a:74:37:b4:db:a5:05:e7:80:5a:5a:fb:
25:f2:80:cd:92:e6:68:f6:22:17:29:22:e0:35:93:60:0d:7e:
f8:02:e7:3b:26:7e:6f:76:c7:f0:d4:be:48:28:07:ed:f5:02:
62:94:c1:8c:b3:6f:49:ed:3e:bf:ef:bd:26:5d:e9:0c:7c:1b:
2d:74:fd:88:b7:7b:4a:a6:05:e2:9c:db:d6:2d:2a:b4:d2:09:
e4:c4:99:e4:00:ff:0c:c7:0a:2f:a0:6c:73:55:79:c5:ec:ae:
a5:f6:58:d7:f1:95:ae:41:b9:03:a5:78:99:e8:da:78:bc:8f:
23:05:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:29 2025 by rpki-client