Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
File: 082f654d-49b2-4849-b255-f53c382599dc.roa (raw, json)
Hash identifier: IvoXQezwnj8BJb8cjg5oH4gpcmwEOHBJVqESO7ttXcM=
Subject key identifier: BF:21:C5:29:E8:D4:7A:42:62:59:56:BF:74:93:79:B3:38:28:F6:AF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12E6A572271E0653E303342703D49FB588233DF4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e6:a5:72:27:1e:06:53:e3:03:34:27:03:d4:9f:b5:88:23:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:0a:d4:00:9b:85:78:f8:de:72:53:41:64:
55:54:fe:6c:36:71:d9:50:7d:38:1e:2c:f0:ed:f4:
7a:54:1f:b0:4e:83:c6:b0:b8:b8:38:e9:53:51:b7:
fa:df:14:c1:97:44:1c:2c:80:77:0a:ae:a5:94:cb:
55:80:7c:02:21:9d:c5:50:56:25:33:38:61:fa:6c:
8a:02:54:9c:b2:45:11:a1:c0:a7:f5:e2:8b:7c:75:
9f:ef:90:14:81:03:7b:cc:13:24:45:1e:46:1b:15:
ce:82:3d:12:1b:c2:4c:2e:64:d0:33:a1:1d:95:ff:
59:90:f5:c0:75:71:6c:a8:ba:b7:16:8f:48:1e:a4:
e8:2f:e5:bd:6a:bf:10:7d:7c:e9:18:48:dc:c0:70:
91:1c:35:f4:cb:6e:be:f9:98:e0:b2:49:20:9a:1e:
9f:2c:17:d1:eb:e6:96:1b:b7:b1:d9:6f:36:f0:4f:
d0:94:f5:e4:83:98:aa:18:b6:83:38:18:64:d8:ab:
c5:36:30:ca:5d:97:03:b4:5d:35:2f:20:b2:2c:a0:
82:35:5b:97:d1:42:e3:c0:8c:c8:94:da:2d:2f:64:
f7:14:6a:02:8b:33:b2:23:15:86:06:f2:ec:ad:3d:
44:23:d8:c7:b6:0a:d8:57:a6:4e:2b:3c:5e:6a:04:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:C5:29:E8:D4:7A:42:62:59:56:BF:74:93:79:B3:38:28:F6:AF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:b4:18:bf:51:b3:21:15:ba:ad:2e:89:1c:c8:f9:0a:15:68:
24:3d:63:a6:41:5e:68:7e:41:19:a6:39:07:7b:3b:f4:f0:fc:
b1:4b:42:64:0a:94:ad:62:84:e4:65:76:78:69:76:1d:c7:87:
e3:d3:3d:a3:92:af:13:d4:72:73:ef:5c:40:2f:5c:71:47:8a:
c4:13:94:83:d6:dd:0a:ed:d9:df:2e:12:01:0a:9f:51:42:1a:
ca:bf:3a:02:94:59:ea:85:73:82:09:53:1b:22:4e:d6:08:c4:
5e:f7:54:88:0a:4b:40:f0:2e:b7:a1:b6:b7:69:e9:c4:6a:91:
2d:f5:da:4b:f2:d7:81:82:81:8c:23:fb:9a:14:09:29:31:70:
b7:34:ac:5a:1a:0c:3a:eb:b4:ef:7f:d2:45:cd:14:33:ec:f0:
c2:f2:3b:52:9a:59:20:c1:5c:b7:93:7d:21:e7:af:40:d7:93:
38:ab:3d:d8:34:e7:52:66:26:2b:96:b1:56:5a:91:6b:33:21:
07:16:3f:22:65:92:b5:db:12:dd:f6:95:86:7e:9b:e8:8d:35:
73:d7:e1:2e:80:76:22:b6:72:d8:cf:ce:d8:aa:6d:30:21:fd:
28:ef:1a:71:c8:12:12:84:59:a4:91:6a:5e:8a:29:24:a9:25:
c7:bf:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:36 2025 by rpki-client