Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa
File: 17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa (raw, json)
Hash identifier: NJYYvkc3Ffog/BlwlX8V1F354nlXZ4SEnJSHcvsRdtI=
Subject key identifier: 98:7F:2A:B4:0D:7B:AE:C1:5E:B9:55:34:09:43:BA:A3:95:0C:12:AF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7D437143A3F30E9C9E5BED6F92419458026932A5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:43:71:43:a3:f3:0e:9c:9e:5b:ed:6f:92:41:94:58:02:69:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:fe:1a:96:1e:94:67:3c:c1:25:f8:78:88:
21:3b:55:01:d1:c0:6d:e6:11:f2:79:0c:ae:51:e5:
c5:78:74:9c:49:90:6d:85:c8:d6:4f:88:70:c0:c2:
78:44:20:54:f4:7b:0b:16:d3:58:93:a6:a5:1a:7d:
29:9a:ee:54:b7:50:95:08:52:a5:c0:63:90:49:43:
62:5c:d1:05:57:37:5c:6c:e3:6f:8b:11:48:e8:6d:
f8:df:5b:56:a2:66:17:16:19:66:d8:56:c0:54:82:
6b:66:43:a5:3d:47:23:93:96:f3:e5:96:76:e5:3c:
27:ff:42:fe:c6:63:14:d4:b0:83:fe:f3:bc:a9:21:
26:f6:92:0c:38:1b:86:49:9a:4a:68:f2:08:33:21:
94:b4:92:b7:75:13:86:6c:fa:18:51:b0:d1:ec:f6:
ad:c0:05:63:89:c4:af:81:24:5b:d7:08:9b:89:8e:
c8:c4:1c:5a:eb:1f:a3:bf:1a:f9:f0:9a:e5:4e:d6:
4e:60:a3:b0:83:bf:5d:1a:e9:12:a6:12:ed:2a:ed:
68:37:1c:40:40:d0:73:14:9b:01:72:da:60:82:ca:
75:9d:a5:22:63:3c:7d:ba:43:13:9e:c4:d8:8d:41:
28:51:da:53:71:8d:41:52:5f:35:58:fb:f6:6b:b5:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:2A:B4:0D:7B:AE:C1:5E:B9:55:34:09:43:BA:A3:95:0C:12:AF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d7:b9:fb:b9:e1:72:27:94:9f:19:82:e8:bf:ec:49:d8:6c:e4:
bb:d6:93:10:6c:f2:0d:d7:22:fc:ff:16:bc:39:ed:77:50:aa:
c0:62:2e:7b:e6:14:d0:73:a3:9e:c7:d3:6f:ca:60:34:74:8f:
71:3e:7c:2c:e8:6d:35:c5:92:16:55:f1:b7:d8:81:0a:89:14:
ba:e8:a0:d8:23:8b:a5:a1:e3:b5:84:83:89:dd:7a:52:f5:b8:
5d:71:10:5b:e7:ff:ac:3b:ee:52:b7:70:0a:69:a2:ca:8a:46:
86:84:94:8e:e0:3b:1e:d7:f5:2c:1c:08:0e:04:ac:ae:a5:6e:
42:92:06:0f:37:15:90:28:30:81:8b:6c:d7:2f:36:79:07:41:
42:48:65:c1:83:3a:14:32:52:59:bc:08:79:07:94:ee:b3:2b:
43:b0:ba:aa:37:8a:0c:e1:ee:7d:36:77:54:9b:08:fd:c5:f5:
a3:c0:33:76:c0:01:ec:ad:f8:28:3f:9a:1d:d6:5b:19:54:a7:
25:e4:43:40:4a:e8:57:76:3d:e7:24:ee:dd:bf:69:b8:61:bf:
44:1c:12:f3:a6:ae:55:86:57:90:7f:c7:6a:79:86:07:12:75:
f5:87:72:5b:b0:38:2a:0e:c0:8b:84:1f:3b:f8:5f:9f:90:6a:
d6:dd:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:40 2025 by rpki-client