Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
File: fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa (raw, json)
Hash identifier: 1xp0YVmCGRznsm2j7KA/6j2bcpitK+y/dNPgX+0qjUc=
Subject key identifier: 9B:A4:17:0A:73:8C:2F:B8:76:D0:3C:37:F8:E4:FC:C5:DD:B9:B7:C7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6ADC90BD92AA2AE561FE131C2DDF5A5CE8D472AD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.76.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:dc:90:bd:92:aa:2a:e5:61:fe:13:1c:2d:df:5a:5c:e8:d4:72:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3c9d584ca32698d64d885b6b568ff4e9d3a7c10aa2fdd6e66e3d6187ecf0429c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:c4:d9:bc:c4:82:b9:e3:e2:f5:b5:4a:61:
2c:37:27:ea:04:e9:d8:df:f4:47:f4:10:5a:02:9e:
2d:1a:71:86:91:bc:33:16:8c:a0:24:d0:51:c8:14:
b2:88:a5:53:b7:81:e8:7f:81:d8:8c:65:a6:3b:4f:
89:36:46:db:56:1b:1c:ca:b6:5b:18:4c:22:85:94:
a5:2c:8d:5c:30:ae:98:2f:1a:9a:65:2f:60:85:a6:
05:de:13:27:fa:20:1e:6b:9c:84:7a:e7:5a:9c:ce:
f9:c8:51:7e:bc:6b:83:0c:f6:ca:2e:a4:ee:28:ae:
ba:a0:6d:f0:03:54:fd:6d:47:f3:70:35:72:c5:c8:
82:c8:a5:c5:c4:ed:a4:43:1f:13:48:d7:ef:75:be:
4c:1b:bf:c5:04:06:1f:f8:39:89:20:6d:33:ab:82:
b6:8e:63:63:7e:21:72:9a:c1:75:e5:42:56:07:3b:
00:65:a8:0c:6a:60:66:92:8b:9c:72:fa:a6:56:b0:
ba:f6:d5:ab:f8:21:6d:27:f1:dd:2c:ab:5b:ab:6b:
09:c3:11:70:58:e8:51:28:c5:5d:1e:1a:87:e1:f9:
0a:70:23:9f:43:6d:10:f2:16:95:42:8e:df:a1:a3:
9e:8e:55:6d:6f:6e:52:59:b0:c1:b5:1e:89:85:3c:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:17:0A:73:8C:2F:B8:76:D0:3C:37:F8:E4:FC:C5:DD:B9:B7:C7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:29:5c:ae:56:1c:81:c6:57:23:6d:22:36:72:06:13:f3:20:
6b:f6:e0:b6:d9:b5:04:11:4c:06:75:03:ec:d3:19:42:99:a6:
77:19:6a:82:c6:2f:2c:b7:8f:87:f3:31:3e:9d:b2:42:6f:3e:
70:38:1c:05:07:70:f0:0d:46:00:83:03:8d:57:93:9b:b1:31:
30:66:07:a7:03:ad:06:ad:1f:15:23:4e:96:5a:99:df:de:77:
3e:81:5f:09:5c:be:e4:a0:4b:42:c5:10:06:45:09:a2:76:d2:
70:cc:b1:5e:72:86:d5:ac:79:fd:4b:12:c1:f3:26:67:7c:24:
41:cf:94:c6:35:d1:92:ed:df:9e:88:8b:53:25:04:a7:e3:6a:
81:bc:46:e1:02:29:7b:b9:67:32:92:9b:81:e8:86:06:f0:6a:
cb:dc:aa:a5:71:82:2a:8b:7e:8b:0f:2f:0e:e9:e0:66:0f:08:
de:dc:f1:34:54:18:0a:73:f7:85:51:b0:59:59:8d:de:7a:2e:
4e:47:a6:6f:e4:5d:41:ca:93:3f:1e:30:a9:11:7e:b8:cc:8d:
d0:3f:fc:9f:a1:68:2a:fd:17:a1:70:3b:b6:f2:d8:b9:5b:b2:
41:8a:6f:26:ee:6d:13:a4:0b:35:fb:dc:a2:79:ba:b3:da:f1:
99:8b:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:04:19 2025 by rpki-client