Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecfa3c13-cba9-4529-84cf-7b6bf8e5cd4a.roa
File: ecfa3c13-cba9-4529-84cf-7b6bf8e5cd4a.roa (raw, json)
Hash identifier: +z14wyuDs4ZpSR88ZQ1DjegCMXrrbZ/ocLH+Lmb9Ymo=
Subject key identifier: 24:D9:E7:58:94:CE:21:AB:39:ED:CE:2F:A9:F6:FB:51:D3:69:15:B1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7DA3D1964DEE565D568D6AAB7B56D50870CC3A8A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecfa3c13-cba9-4529-84cf-7b6bf8e5cd4a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.200.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a3:d1:96:4d:ee:56:5d:56:8d:6a:ab:7b:56:d5:08:70:cc:3a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=4b67fce0ec3b3fd7d6211addcbd668e3f7a848743adf721c403b64cbcc8b95f6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:5d:4d:44:7a:e4:2e:79:55:8b:e8:70:db:
ae:6d:99:73:ad:c4:16:01:ef:da:f8:b6:3a:63:fa:
56:da:cb:0b:68:ab:09:f9:31:60:53:4a:fb:3f:87:
2b:1a:eb:1a:6d:0f:49:b4:30:a6:7a:3d:f7:7c:03:
89:f6:b9:4c:f5:71:5b:c6:83:3c:be:85:95:a8:3a:
c6:16:b8:35:5e:64:79:f2:f7:83:83:52:56:28:9b:
93:23:9a:bc:61:be:1b:5d:10:48:e8:53:4f:75:10:
f9:6d:1e:d8:36:6a:78:09:5c:65:fe:7d:a9:f3:ca:
44:c3:97:a8:53:13:02:3b:44:13:7f:96:15:52:41:
32:16:b4:1c:84:01:65:4d:56:41:e1:b5:7d:1f:7f:
d2:c4:ea:27:d5:f2:5c:d9:e5:23:66:ab:43:af:08:
d9:6d:f5:e7:33:74:d3:7d:0f:65:17:69:20:02:e0:
69:07:72:bb:cf:55:38:7a:e9:13:66:62:6c:6d:7e:
6b:97:99:26:de:d8:84:29:a3:01:f1:29:35:27:0d:
f7:c2:93:78:92:1d:13:45:5b:49:f6:34:07:cc:b6:
c8:b3:cd:17:41:dd:0d:6f:13:bf:69:31:ad:36:98:
6b:f4:19:76:46:5f:ff:61:e2:f2:db:7e:26:ca:d2:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:E7:58:94:CE:21:AB:39:ED:CE:2F:A9:F6:FB:51:D3:69:15:B1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecfa3c13-cba9-4529-84cf-7b6bf8e5cd4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7d:c4:b8:1b:8f:ee:ac:c9:ef:80:c5:5b:ce:8a:50:86:3c:02:
7c:6b:ae:c8:20:6c:59:73:94:6a:ef:72:df:70:de:25:27:cd:
96:16:7a:bc:32:8d:29:a8:e8:f4:5e:ac:38:8b:db:52:63:68:
29:4e:24:21:83:91:c7:36:60:09:d0:01:4c:09:d8:bb:8f:b6:
23:ad:b8:a0:7e:c6:7a:b1:20:b6:d9:4e:40:b7:4e:8b:28:2b:
92:35:55:99:3b:4a:85:cd:8d:7a:ff:d5:53:3f:13:6f:c7:3c:
66:45:a8:6a:0d:d7:5b:64:a5:fb:ad:1c:75:77:e6:5e:97:4d:
5b:fe:89:7c:9f:bc:a9:97:91:93:dd:4b:72:b7:c3:81:ef:a8:
c4:35:e3:af:2c:6f:75:52:6d:88:66:8b:a9:c7:9c:24:19:cc:
05:a3:d2:a2:10:91:0b:16:5b:60:39:70:04:61:8e:f9:ef:eb:
f4:46:f7:b9:2f:7a:bd:f7:70:13:81:9d:aa:9a:87:56:bc:92:
48:dd:03:8b:0e:a5:6c:2f:d8:58:c4:39:ec:52:71:8c:1d:8b:
eb:fe:26:97:f4:33:fd:fb:7e:58:62:66:7c:84:f3:95:f1:d1:
0d:3c:8f:8b:c5:7a:0b:6a:ba:9c:d9:5d:19:84:82:cf:9d:7a:
fc:ab:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:32 2025 by rpki-client