Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
File: fc50f617-7597-4f4e-b8f6-87763b28caf0.roa (raw, json)
Hash identifier: YwSOsfM3pNwwdKtD68VzqczCXsPoKo5nEUm6pCTMVTo=
Subject key identifier: 57:D2:48:10:6C:9C:51:7C:16:A4:BD:4A:5C:0B:D7:01:1C:BA:E3:C4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5A2619C4E5B3A740F65E0DC37584FDB44CC0F4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:26:19:c4:e5:b3:a7:40:f6:5e:0d:c3:75:84:fd:b4:4c:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=eafb83c71f919836573d7b32f4835b9560bfbd942df29650fedbc1713aaaeffe, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:55:4f:14:36:a5:1c:c9:bd:8e:5e:6f:38:
8f:27:7e:ce:23:bb:09:e2:71:c2:71:ae:ea:89:17:
53:af:14:ff:f9:92:8c:64:51:51:a2:2e:e2:04:60:
1e:87:71:96:fa:96:23:28:f3:01:3e:05:be:ad:5f:
6f:e9:b2:e5:ca:77:da:f8:6c:f9:ed:de:e7:bb:dc:
0b:c3:ba:48:e3:05:2f:50:a0:71:6e:59:78:65:29:
2b:63:18:d0:96:db:27:2d:32:ac:32:0a:61:1a:15:
39:15:23:f7:45:07:f3:cd:33:ec:2c:59:dc:d0:e3:
e9:ad:17:00:bf:f2:b1:e6:ca:97:b2:56:2b:79:43:
16:2d:fa:83:7c:10:76:bc:59:8a:92:7f:73:63:65:
a4:62:29:29:b7:a4:d7:4c:c7:f4:da:54:e3:93:09:
a3:f2:2e:05:bf:79:b3:c6:96:a7:82:c0:a4:53:47:
dc:d4:be:ad:2f:10:25:b4:c7:01:53:73:a8:39:dd:
c9:80:31:bb:be:f8:c1:3e:d0:84:ed:31:29:eb:a5:
2e:c2:da:b7:c2:64:d1:d7:36:1b:28:f9:f2:62:87:
3d:0f:f1:bb:e0:7e:50:70:70:89:cd:9f:a8:0b:25:
0b:6a:c2:fd:4f:a6:2c:b3:70:a0:34:0b:56:10:52:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:48:10:6C:9C:51:7C:16:A4:BD:4A:5C:0B:D7:01:1C:BA:E3:C4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:7d:df:f1:76:d6:0b:6c:c3:b0:77:63:57:0f:15:1e:e8:16:
88:62:31:e7:fe:c9:12:2c:93:b7:c2:80:37:f9:56:fd:f3:94:
42:bd:28:c2:61:55:b6:29:38:d7:f0:09:1d:1d:da:c8:ce:6c:
5b:17:52:5b:e8:18:47:42:86:3a:f9:e3:4a:c8:56:1d:f2:48:
b9:f4:73:d3:74:76:7d:99:a9:55:02:90:b3:60:fe:02:15:33:
4e:97:5d:c8:b5:21:0f:f6:65:5c:8d:61:cb:46:5f:ae:43:5f:
4e:02:bd:65:1d:87:cf:cd:9b:d0:d6:cd:d2:e8:e6:06:b3:c5:
5f:9e:f1:ec:1d:2f:e4:e2:67:76:90:63:78:54:b2:2c:68:c9:
5a:54:e9:32:33:1e:b5:4e:ef:35:a5:45:3f:62:83:9a:1d:a6:
5e:0b:d0:1d:fc:e5:01:5d:ca:42:51:e8:61:fc:d6:7f:c9:f6:
d9:e1:ae:bb:2c:31:79:7d:63:38:c3:aa:08:60:34:60:e0:dd:
46:d4:4b:99:6a:f6:f4:81:81:72:1e:62:38:00:1f:b0:66:d0:
60:14:71:60:90:0b:2c:79:f6:cf:b9:ec:41:4a:ba:d1:8e:2d:
16:8f:b3:bf:4c:45:d0:ea:3d:5c:7e:fa:19:2d:ad:d8:43:ba:
00:61:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:09 2025 by rpki-client