Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
File: 0a36b38b-9bd1-4014-823d-9204a303350e.roa (raw, json)
Hash identifier: Hgy02cnEV4jgg++y1Cy9XS8b94SvXt6q+t5w3QzYuvs=
Subject key identifier: 04:CC:C0:49:BC:66:4C:57:1F:96:1F:B8:28:A5:17:E7:65:B8:0B:9F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7D9FAC4A734E7D0F8CD8DCB670583B5EFFAB3DC1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
Signing time: Mon 10 Mar 2025 15:30:08 +0000
ROA not before: Mon 10 Mar 2025 15:30:08 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:9f:ac:4a:73:4e:7d:0f:8c:d8:dc:b6:70:58:3b:5e:ff:ab:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 10 15:30:08 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:27:ce:fb:07:52:0c:ee:e6:10:37:ba:bd:
bc:ed:9d:95:77:6f:d6:9e:61:54:1e:c0:99:41:60:
5d:29:84:ef:26:92:39:60:d7:fd:c6:74:28:00:57:
34:88:31:b5:1a:71:cf:5b:36:6b:5b:6b:01:ce:a3:
7e:28:01:9c:8f:f0:8b:66:0f:db:b9:9c:58:69:1d:
7b:55:78:5f:7b:d6:b7:00:7a:15:29:74:e8:66:57:
4b:38:59:ca:52:c4:d2:97:3f:c0:35:7a:61:ed:93:
53:b5:5e:88:21:ee:d4:3b:34:2b:67:ee:a7:64:b5:
d2:c6:97:eb:10:7f:a4:99:de:f0:6d:c2:f5:d3:f1:
aa:13:a2:de:7a:9f:59:7c:0f:50:81:0f:9c:bd:24:
05:72:1b:20:5f:56:8e:bc:fe:15:8c:03:5e:03:6d:
73:23:24:76:bb:1b:83:e8:74:0e:b5:96:1f:ed:3b:
a2:84:05:98:fd:6c:e9:36:ff:d9:fb:4b:6e:bf:d8:
c0:8f:c7:35:e6:a5:0d:1e:0a:ca:af:60:73:43:a4:
5b:08:3d:4d:fd:90:06:56:86:42:05:e4:e5:b8:05:
38:5a:15:62:b8:db:55:8c:f0:1b:a5:75:3e:40:ad:
ab:7b:eb:f6:68:ec:26:39:19:45:60:64:e0:5d:a2:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:C0:49:BC:66:4C:57:1F:96:1F:B8:28:A5:17:E7:65:B8:0B:9F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b8:b4:17:10:f3:f6:d4:73:8a:5f:23:64:09:4e:53:27:4e:
8d:3e:9f:55:78:0d:61:1d:a6:fa:56:5a:3f:a2:fd:bc:cb:9e:
b3:ab:1e:18:55:57:8d:f0:32:c5:c2:d3:fd:de:34:22:94:01:
71:eb:a7:05:3c:94:b1:37:9f:9e:d9:0f:98:7a:06:11:40:21:
b3:eb:51:a6:9e:d8:de:0a:e2:a7:cb:7c:44:8e:32:ca:3c:41:
a5:be:cb:66:3c:0a:0a:cb:ee:33:36:09:a4:e1:fa:f2:c7:51:
09:25:f1:04:22:08:a6:57:aa:2c:3c:f0:f8:18:0a:74:f3:2e:
9e:cd:08:ff:e4:48:fe:ce:00:b7:dc:6b:cb:99:52:52:e4:cf:
bc:50:51:cc:7b:42:5b:58:4a:1d:dd:b0:f4:05:af:30:90:6f:
21:d3:7d:62:98:e1:6f:a2:a3:5d:03:26:3b:b9:f3:35:fb:00:
81:07:f1:53:e6:17:17:70:40:d1:11:55:7f:b4:05:35:8b:f8:
1b:b8:9c:13:87:16:64:13:c4:c6:72:85:f3:91:02:b8:cc:b2:
41:89:31:06:7a:d5:a8:8c:67:49:2e:35:f9:d4:c3:59:d2:95:
e8:d2:f2:c0:f7:16:3e:d1:db:f8:76:49:58:df:8e:c5:5a:c3:
f0:8c:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:26 2025 by rpki-client