Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
File: e2093baf-9227-4159-b7ff-180369fe3bda.roa (raw, json)
Hash identifier: 3R2rcvs+mIAi/uZcmSQ5JZeOsZJi0XvR9+2ogGAXjo4=
Subject key identifier: D3:7D:0E:99:1F:42:D9:6F:44:D7:79:3D:E3:18:C8:02:98:5C:A0:1B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 32D806CD6EC03D9877A3AFA323DDE6F8B398315C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d8:06:cd:6e:c0:3d:98:77:a3:af:a3:23:dd:e6:f8:b3:98:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=09a6862d16dffc67bfd71aded4ecf09425eeb7128524451e0949136855c201c6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:70:30:fa:dc:a1:44:2f:a0:c1:a6:0d:63:
d0:5b:87:88:1d:a2:28:bb:b4:fa:1e:f8:f2:e3:67:
c0:49:36:ab:ae:25:1d:59:81:9b:1e:51:70:cb:0e:
16:6f:29:62:3b:34:7b:67:50:a6:5f:8f:99:42:12:
24:46:0e:15:53:14:0c:fc:96:bb:64:9a:b2:40:2b:
6f:81:7d:82:80:5d:60:7b:8e:d3:ae:ee:b4:20:8f:
eb:0e:78:be:04:53:78:7c:e3:21:5c:70:a1:ee:a6:
ac:ba:f0:89:6a:9e:13:92:b5:90:4e:2e:8b:99:07:
e3:ca:8a:82:23:ab:da:5b:bc:71:56:78:e4:0f:45:
88:b5:ff:c3:ef:74:36:84:91:23:5c:0b:6c:1d:90:
e5:f1:a3:e7:48:21:52:27:1e:9b:79:b9:bf:15:6f:
d4:15:1d:3a:5e:6f:74:b6:5b:ef:36:83:d1:a2:8e:
43:a2:66:00:f0:99:b5:9a:ce:be:03:e6:dc:5d:83:
71:c8:d7:45:04:6e:35:b8:e1:7b:83:62:90:6d:16:
6d:25:e4:88:17:5a:9f:57:b0:95:e2:4a:ae:ff:8f:
98:2e:ae:fe:bd:97:3e:17:eb:09:71:fd:aa:98:8c:
4f:cb:38:42:16:8c:97:8e:22:bb:94:5c:2d:41:85:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:0E:99:1F:42:D9:6F:44:D7:79:3D:E3:18:C8:02:98:5C:A0:1B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:b5:2c:c0:7a:f9:af:a4:8c:5f:ce:b7:7f:ee:ae:a5:52:d1:
e0:eb:50:4d:69:76:8a:8d:a8:f5:63:90:ba:5a:6c:30:67:7f:
85:4e:66:82:15:a5:99:9f:9c:cf:dc:64:1c:fd:6e:af:e1:b2:
2c:43:bc:be:84:5c:dc:42:d8:28:e5:bd:eb:af:9d:19:4b:32:
f9:c5:01:41:56:73:7b:74:f9:ba:ef:bb:6e:91:63:a3:1f:d3:
5e:0b:6e:9d:db:8a:79:4c:48:cb:49:88:10:f2:2f:20:5d:76:
e4:89:a4:94:2d:cc:eb:2f:95:cb:da:2e:5e:0d:ee:26:68:d0:
d7:b8:63:e4:12:6b:66:30:e0:6d:f0:36:d0:4e:8b:21:6b:be:
50:47:62:b8:ba:7d:89:41:be:63:a2:99:aa:f4:36:f4:11:f6:
16:33:8d:34:45:fa:9e:aa:19:c9:2d:9b:24:72:a8:a2:42:0b:
ff:ad:75:1c:ff:f7:65:81:88:da:0f:8a:03:e4:4e:be:42:95:
26:81:2f:a6:c5:d2:48:72:d7:2f:fa:7e:b3:8b:2f:f4:d1:71:
b1:aa:e4:9c:ce:9d:a8:1f:c0:de:fc:f4:c5:c4:94:45:9c:35:
e3:cf:e3:19:8c:e8:8e:2b:37:5c:9f:d5:2a:b9:9e:e3:ea:dc:
c0:64:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:42 2025 by rpki-client