Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
File: 179c664b-afae-4c21-9c97-2a2a3985d5b0.roa (raw, json)
Hash identifier: GjpneRkW6rd2sIABh9JstB7FpqDtpHKs2kxPtJrEhyY=
Subject key identifier: CC:CA:B6:12:F0:96:72:4F:C8:01:82:76:AE:4E:71:EE:19:1C:3E:28
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 35A208443695179CAD4A689E90D9DD514621AF64
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
Signing time: Wed 05 Mar 2025 17:50:10 +0000
ROA not before: Wed 05 Mar 2025 17:50:10 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a2:08:44:36:95:17:9c:ad:4a:68:9e:90:d9:dd:51:46:21:af:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:50:10 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:b4:03:5b:5f:18:8e:bb:be:b5:a2:a0:5f:
d6:f2:67:37:99:d8:81:9c:34:ca:4c:00:80:7f:b8:
e9:be:5a:71:32:b9:de:25:f1:b5:7b:09:73:33:ec:
8e:47:cd:77:e4:21:33:a1:3b:1a:9c:1a:87:41:ed:
ec:94:0a:15:3b:65:d8:88:c4:0f:7b:d7:d1:d3:f6:
fc:18:d4:17:16:e0:87:d8:5b:6b:eb:99:0a:39:32:
74:6f:0d:aa:31:f1:08:42:c0:73:d9:da:62:82:3c:
c7:cf:36:03:59:69:10:70:ad:1f:77:fb:7c:75:9a:
a9:ce:e3:4d:9b:2e:06:a7:a0:bf:11:74:f2:07:05:
4e:2d:e0:01:67:ec:79:33:5f:03:c0:b4:ee:38:1b:
81:49:2e:8c:88:fa:b9:16:dc:f2:01:53:04:19:80:
1a:5e:f2:2f:87:e1:f2:64:01:bc:6e:29:73:80:13:
d9:2e:05:35:f3:d6:ec:46:c1:98:75:37:08:e2:f8:
6e:15:ea:74:42:cd:cb:05:25:fb:9a:64:24:50:96:
c2:82:99:cd:ed:0a:88:3f:3f:9b:e9:af:94:67:cf:
f3:28:d1:41:1b:91:30:02:23:9e:9b:48:21:9f:38:
c2:e7:56:41:11:1f:ea:9e:d5:4a:80:7d:af:5f:87:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:B6:12:F0:96:72:4F:C8:01:82:76:AE:4E:71:EE:19:1C:3E:28
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:a4:48:c6:a1:d2:8e:11:99:96:67:ee:9f:0b:5a:f1:af:66:
10:ee:c5:cf:e2:0a:1b:ca:77:b5:af:59:58:81:1c:f3:8a:2b:
fa:0b:58:20:e0:20:50:a4:63:19:d6:23:34:1d:ef:97:b3:f0:
d8:e9:a0:6d:c5:08:9a:a0:45:2e:2a:5f:65:d8:09:51:47:1f:
81:10:84:00:23:b8:90:2c:d7:db:dc:79:24:42:99:09:ec:41:
81:2d:92:9a:f3:97:83:9b:9d:20:37:70:72:90:d1:42:7c:18:
17:f5:89:25:99:e3:e6:32:55:79:fd:cf:56:95:24:fa:3c:9b:
43:90:be:20:0a:93:85:55:d7:7c:e5:e3:85:b7:af:bc:9e:fe:
4c:79:72:9e:02:15:d2:59:cd:d5:1d:03:f2:87:aa:1c:90:fb:
1e:3b:74:ef:6c:a5:9c:de:22:af:e9:8c:da:88:12:f0:87:3a:
8d:66:33:d4:22:3f:3d:44:b0:ec:c6:65:aa:fc:36:04:80:24:
4e:87:9f:2a:a6:26:8a:db:f7:99:37:a1:ee:c6:19:92:fe:2d:
74:ff:9a:20:b4:e7:d9:70:48:19:a5:e4:47:dc:2e:f3:88:a3:
cc:f1:0d:1f:87:1e:98:f5:e4:0e:3a:c7:13:1e:f2:9f:a8:7c:
10:bd:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:47 2025 by rpki-client