Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
File: 031fea15-c13d-4e0e-babb-6e454a72d1c1.roa (raw, json)
Hash identifier: u8Q2KyGJqP40hwxOYnQZBJTZv+OO4aNF+79VugYrig8=
Subject key identifier: 25:7E:96:FF:6E:70:75:A2:91:32:BC:D8:0C:26:7B:75:55:8A:42:A7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5A6D9BDF8011DCF26C9E9824006EB6BC7DBEE9EA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6d:9b:df:80:11:dc:f2:6c:9e:98:24:00:6e:b6:bc:7d:be:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:be:a9:db:17:f3:74:43:42:4b:61:20:4f:
5e:22:0a:5d:1d:3f:b8:81:a6:9e:71:67:ec:36:ef:
02:28:0b:43:e3:49:0d:66:98:05:3d:f5:53:66:ca:
b8:d0:03:a8:b9:d2:dc:38:51:85:64:5b:c0:89:ac:
b8:cf:e1:11:10:e3:72:36:a8:6d:77:65:4a:be:70:
bf:2f:22:4b:59:67:b8:e1:3c:e1:1e:92:2d:9c:f4:
81:9f:08:d6:3b:6f:ef:25:bc:75:f1:40:76:df:d4:
bc:61:05:c5:0f:1f:8c:20:10:f4:dd:b5:3d:84:11:
ee:2d:db:d4:e0:cc:e4:7e:61:38:db:3d:3c:97:aa:
46:7d:69:2b:54:89:c4:87:09:fb:c3:79:e7:fb:85:
f4:7f:70:34:dd:81:b9:70:36:a4:28:76:8b:7e:09:
ec:1f:37:61:28:48:fe:9d:e0:f6:f2:42:c6:5a:c8:
2d:f3:c3:93:2a:a5:c0:ac:fb:60:af:45:53:88:2b:
b1:a3:33:6a:bd:0d:52:0b:60:de:a5:c2:e3:9a:0c:
88:fc:6b:88:0c:b0:8a:cd:37:8c:94:86:20:5d:7e:
e5:27:9a:b9:fa:20:43:91:db:9a:15:57:60:fa:84:
fe:3b:77:9a:f8:07:a9:fa:a8:38:dc:94:29:f4:10:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:96:FF:6E:70:75:A2:91:32:BC:D8:0C:26:7B:75:55:8A:42:A7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:9d:95:0a:9c:3b:ea:35:f1:e0:80:bb:4b:54:49:fe:d6:5c:
78:22:25:d5:b7:74:2a:9b:75:16:a3:b0:00:99:a1:72:de:c8:
e1:77:54:f9:b6:be:08:8f:39:93:b0:fd:89:c3:ab:a0:8f:d7:
0b:f2:70:9c:7a:b2:31:ef:60:e2:0d:d4:e6:69:e1:41:67:d2:
77:a1:f3:b6:c0:4e:43:ea:56:62:c4:e8:d8:b0:03:00:8a:fd:
e7:6a:dc:a3:34:c3:65:27:35:ef:71:07:f2:db:0a:ee:5f:29:
bf:fe:59:12:0a:c3:2c:5d:8e:8b:d6:db:9f:9e:37:21:10:d9:
69:2e:c9:60:29:52:d3:aa:eb:5d:c4:b6:b2:fa:fd:29:b8:71:
15:ef:eb:a6:5e:47:a0:75:7b:18:9c:1b:52:6d:27:ff:68:4e:
bb:db:29:75:f6:77:d9:40:d0:2a:4d:2d:92:11:50:a2:57:83:
41:05:36:8e:f0:e1:9a:49:78:98:32:b8:6f:09:02:e7:62:71:
d1:5d:04:13:64:74:6b:70:1b:6b:e0:5d:57:8c:64:4c:8b:c8:
77:43:b0:18:42:42:89:81:bb:fc:f0:d5:c4:35:ab:e0:6e:c1:
c3:19:3d:91:72:89:50:f9:87:2e:cd:93:08:04:e3:1c:e2:0b:
77:8d:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:12 2025 by rpki-client