Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa
File: 0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa (raw, json)
Hash identifier: zKxXpsuuvUFpxZ9fmQIQt9f7976kwWSM0vk72bcyClg=
Subject key identifier: 91:A5:00:E6:1A:30:42:5D:1A:6A:89:28:0A:01:CB:31:34:F2:CA:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3046C3EB4EC7B2034A7F9886B5161BD62E57F1B9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa
Signing time: Mon 17 Mar 2025 15:40:54 +0000
ROA not before: Mon 17 Mar 2025 15:40:54 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:46:c3:eb:4e:c7:b2:03:4a:7f:98:86:b5:16:1b:d6:2e:57:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 17 15:40:54 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:32:9e:5b:10:56:87:e2:b8:f0:1f:4d:31:
65:3e:67:01:1b:26:9d:30:8b:1a:61:78:fe:7e:4c:
1b:eb:48:58:7a:00:68:a9:41:b6:c1:cc:d0:98:1a:
8b:e5:d6:79:c6:c7:fb:e5:31:96:85:14:51:b6:12:
22:e5:1c:24:5f:de:3b:23:99:bb:0e:e0:f8:51:06:
05:b3:1c:09:d8:06:38:27:4d:85:ab:02:e1:87:82:
ed:67:5f:a1:76:80:02:0c:6d:e1:d0:60:9d:f6:ae:
78:c1:09:4c:0a:bb:cb:43:43:7d:4d:45:ef:d0:a7:
9a:c6:62:55:44:dc:f6:0d:1d:4d:b3:3d:1b:ba:8a:
b2:d1:85:56:61:64:f1:23:42:6e:83:ff:ac:d1:3b:
dd:2a:8f:fa:b0:4a:8c:33:79:2b:46:46:65:0d:a0:
ce:d1:d9:ec:fa:8d:85:c5:a9:1c:9e:dd:bb:f5:f0:
a9:dc:eb:5d:cc:f5:76:88:72:c2:13:32:27:cf:bb:
32:40:9b:c5:4d:1f:f2:c6:27:4d:49:a4:39:da:af:
a0:70:b4:5a:1e:b9:ca:81:33:7a:cf:ea:bd:1b:bd:
51:bf:76:22:ef:76:61:f5:0e:a3:60:42:2b:0c:96:
dc:f1:0c:2d:29:af:b1:d1:77:69:45:8f:1f:4a:7b:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:00:E6:1A:30:42:5D:1A:6A:89:28:0A:01:CB:31:34:F2:CA:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0f6bc0d2-8628-4ccd-a0d9-39bab00ce826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2d:34:ca:bb:f6:89:e0:88:d2:ef:fe:fc:99:e5:e8:80:c4:90:
5b:e6:a2:8b:b0:94:83:47:21:40:bc:e4:cd:58:88:b4:b8:19:
fd:72:d3:0e:7f:ee:be:d1:23:c3:cb:ff:84:97:b0:92:0f:ac:
c8:a3:2f:14:0b:5c:f8:cf:23:aa:d2:ab:a7:bf:17:ca:99:b4:
90:85:0c:12:ee:76:b8:8d:f8:58:f0:e6:1b:7e:3f:db:ad:b2:
6a:c4:d7:da:83:5d:03:c2:32:39:3a:84:f4:64:27:fe:c0:ba:
80:38:eb:09:49:5f:c9:5f:52:d0:6f:75:ee:59:91:cf:25:a2:
84:4c:6e:93:5a:5c:5a:f7:54:f2:2c:6f:93:a2:18:34:9f:d6:
34:12:9f:00:62:cf:e4:0f:98:49:6c:00:95:53:51:1d:c2:80:
83:1b:1a:a7:21:a6:e7:3b:bb:28:68:ab:0d:40:b8:cc:61:40:
46:24:8b:7b:85:be:60:20:61:14:a5:8d:4e:87:e7:03:41:c1:
9f:4c:e1:3f:b6:78:ac:c4:74:2f:98:54:d0:64:e0:8c:83:52:
4d:09:e9:5d:31:49:cf:d5:08:e9:bb:ce:6d:84:c1:a8:90:29:
fe:d2:4f:68:a2:df:51:da:51:cf:5b:10:5a:47:ce:bf:a5:a6:
a2:8a:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:12:22 2025 by rpki-client