Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
File: f060e190-89f7-4009-9831-b2d429343b80.roa (raw, json)
Hash identifier: COtPzCOkp/Lw2bIEDAxJTIYg6CEMe6eUoxkDLODWwBk=
Subject key identifier: C7:18:9C:95:0D:86:F2:2D:32:47:68:A7:F7:C7:C1:D5:3A:B1:F2:3F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1CFC29DE14DAB63CA9903D98B199FE9B4A0703FD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fc:29:de:14:da:b6:3c:a9:90:3d:98:b1:99:fe:9b:4a:07:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=0b4a81f23d33fe2f4086f6114cf1f59b8baee159f75a34307720a251582f17b9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:8f:07:b7:70:05:f1:ff:15:e7:67:0e:3e:
08:ee:0e:5a:d5:f6:e9:46:8c:88:c4:62:24:c2:2d:
49:6f:49:3c:4d:ba:8f:a5:b7:2b:e9:30:94:93:7c:
a0:d5:12:36:c2:88:33:b6:15:5e:c1:25:54:fc:17:
57:62:b6:85:1c:71:ed:9d:42:20:b0:2a:ba:1c:fa:
f7:01:f2:8f:17:a3:4d:ff:ae:c3:b3:a3:bc:4a:3a:
7a:4d:4a:79:85:48:35:d0:62:aa:c9:39:00:b0:6b:
1f:04:2b:15:57:32:dd:55:29:27:97:05:87:33:b4:
45:71:04:0e:cc:9a:c3:4d:a3:3f:1f:86:80:4d:be:
28:4c:7a:51:51:5c:8d:40:e2:15:b1:63:af:82:e5:
bf:02:95:b6:f5:73:54:c8:4e:61:8b:dd:c2:de:e9:
cc:b0:b7:0f:b7:7d:ea:a4:68:34:ae:15:ce:df:27:
42:0f:eb:63:e8:5b:ac:eb:a1:da:69:38:61:e5:9a:
b4:e7:c2:39:0e:92:33:16:cb:bd:69:6b:e6:2e:3a:
45:4e:73:f2:55:fe:04:f7:bd:68:b6:ee:71:52:3e:
7d:6d:29:27:43:9b:0a:16:87:54:c8:4b:7f:43:db:
36:f9:85:a0:cd:f6:63:6d:e6:03:24:70:c2:a9:fa:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:9C:95:0D:86:F2:2D:32:47:68:A7:F7:C7:C1:D5:3A:B1:F2:3F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
10:4f:3f:2e:64:3a:13:81:71:f7:32:c8:f2:9a:e3:5f:15:c9:
7f:f1:43:de:42:d8:77:b2:5d:9f:c2:59:8c:85:c5:4b:1e:12:
12:ac:8d:b2:37:50:50:f7:cf:50:a1:ae:94:17:9f:d5:9b:29:
e1:ab:1c:04:be:7c:46:fb:ac:7b:70:0a:39:cd:73:4e:d3:98:
ae:95:9b:9f:de:b9:c7:5e:15:65:49:f8:69:64:85:8f:81:c7:
b0:04:39:36:8c:ad:62:2b:12:be:ab:c3:48:2c:1e:e2:82:cb:
04:ca:e9:b4:ae:76:f7:d1:6e:54:2f:cb:28:a5:52:1d:4d:45:
44:a7:be:5d:f0:5c:1c:4c:c1:f5:75:dc:65:3c:ce:20:7a:37:
3e:c4:0d:4f:0e:07:e5:3e:1f:9d:eb:4a:db:f6:ad:b4:f2:00:
92:93:cc:31:1d:a1:0a:72:df:31:4e:af:77:14:93:92:93:b3:
08:29:13:9e:17:bd:83:48:d0:41:d6:0c:5a:30:47:ef:be:37:
08:81:28:ef:95:3a:c6:9a:7b:e5:57:5e:45:84:ba:5a:9f:35:
c0:e2:dc:b5:b3:31:7f:e2:67:65:d0:a8:d0:cd:87:6e:23:06:
5f:d4:4d:14:65:f0:54:90:f3:f6:41:5f:00:21:fc:97:e6:f1:
75:48:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:56 2025 by rpki-client