Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
File: faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa (raw, json)
Hash identifier: zQwyYwaMgLGVDLmNtyjsxqxGYKnX9Am/aNnXurke+fI=
Subject key identifier: B8:E2:91:81:94:42:55:50:36:33:CA:EE:1D:AA:BE:EF:02:69:9F:88
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3A47935620A98A22EEB67F2EB07B749F41FDBFA9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:47:93:56:20:a9:8a:22:ee:b6:7f:2e:b0:7b:74:9f:41:fd:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=c3d0a5bae8d11376549c600cfae8a435e85fcf04bdfdbc421074a40f77ab8f34, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:57:a3:a0:36:ce:54:5d:c0:4d:81:d4:61:
15:b9:fa:97:b7:4f:80:7f:77:3a:8e:38:44:97:e2:
95:b0:b5:7b:9e:8d:9a:ad:59:c3:6d:b5:1b:36:f5:
8a:b7:be:f7:4f:69:8a:3c:84:2b:69:3f:2b:16:ff:
64:ca:81:cd:1f:73:8c:92:7c:6d:e1:7e:3b:8d:c1:
dd:f9:72:ab:b6:27:80:63:86:a0:79:0a:5e:4a:1b:
ce:e3:85:36:af:13:0c:31:90:e3:4f:43:e0:7c:60:
b5:3c:4f:31:f5:1f:4d:7d:e6:37:52:54:7f:e7:11:
8e:6c:42:79:1d:3f:35:dd:a5:d8:5b:a1:c3:63:dc:
66:14:14:fc:21:fc:1c:2b:5d:6c:97:f5:5f:d5:29:
84:ed:4a:95:04:12:56:b3:c4:1f:08:f0:57:9d:7b:
97:e1:06:e5:8c:e8:d1:af:3d:89:0c:3d:d7:0b:6f:
1a:f4:7e:f2:e5:69:05:ab:9b:8d:99:7e:21:ab:f3:
b2:a2:81:8e:b9:cd:dc:ec:54:8c:69:79:a4:6e:ed:
33:01:b3:1a:f1:a6:b8:42:d2:93:48:16:a4:f7:16:
12:29:13:eb:35:6f:09:3f:b8:82:55:06:a4:49:0e:
20:62:6e:a8:a3:33:40:9d:07:4f:38:9e:ba:80:48:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E2:91:81:94:42:55:50:36:33:CA:EE:1D:AA:BE:EF:02:69:9F:88
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.240.0/22
Signature Algorithm: sha256WithRSAEncryption
74:96:e5:8d:f0:0a:a6:40:28:6b:f0:8b:ee:a9:09:3a:30:38:
a1:a5:c7:44:46:de:fc:e2:c2:19:22:48:55:aa:e6:28:c5:fe:
29:27:d5:62:95:6e:e0:47:22:bd:5c:63:1f:a7:da:81:be:53:
f4:f2:67:92:c2:37:31:a9:b6:82:48:0f:d3:f2:ce:32:5d:d7:
cd:46:f4:a6:09:59:df:b5:d5:36:82:80:2b:4f:98:1b:6c:1d:
ad:2f:1d:7d:98:78:1f:51:08:8e:fc:12:b9:fd:5e:91:4d:ae:
41:13:87:f1:c2:da:5a:b4:4c:04:ca:51:5e:3f:5c:4e:0a:74:
ab:67:c0:1c:70:9b:23:e5:87:71:5e:fd:90:e7:14:af:5d:8e:
e6:e7:49:cc:09:01:18:d2:6f:fc:54:4f:d8:9a:80:8e:45:ca:
82:f2:00:c3:6f:8d:9f:d2:2d:43:4c:0d:9f:2c:c2:4a:a9:c4:
bf:99:cc:af:1b:d3:18:cd:44:a6:dc:33:85:95:1d:d9:db:2b:
bc:27:2c:22:d3:ed:38:11:03:dd:0a:76:da:d0:62:97:3a:63:
17:6a:13:4a:8f:4c:ab:9b:06:c0:2c:98:72:c4:7e:1f:9e:03:
ff:80:d1:88:ed:bc:9f:d1:68:eb:99:cc:aa:40:03:36:e7:75:
67:3f:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:48 2025 by rpki-client