Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29b3caa9-6470-45c4-9283-9836b50ed0d6.roa
File: 29b3caa9-6470-45c4-9283-9836b50ed0d6.roa (raw, json)
Hash identifier: LC/fo48UOD1gmkSK9XVlIf1mh6tQs8BMaQMR9trK41U=
Subject key identifier: EF:E0:9E:BF:E7:25:46:A7:33:7D:24:5F:CB:51:94:85:37:AF:E9:82
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 421AD22704ABC824B02DBB1FAE5004A975CBF4E6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29b3caa9-6470-45c4-9283-9836b50ed0d6.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1a:d2:27:04:ab:c8:24:b0:2d:bb:1f:ae:50:04:a9:75:cb:f4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:92:67:9a:f0:e4:36:01:ad:cb:68:16:bf:
ef:02:0b:ec:a7:98:24:47:94:85:09:6c:28:46:15:
ea:4b:b9:f1:d9:ee:8a:c8:bd:9b:b5:95:14:cb:34:
ef:dc:92:69:62:ed:53:09:08:85:5c:74:75:bc:fe:
b1:56:5b:48:21:69:f6:03:8e:66:2d:c2:38:e1:99:
cd:aa:bf:18:f8:dc:ab:79:13:54:c1:e9:0e:76:26:
ab:94:96:61:9e:e9:7c:61:0c:0e:0a:8a:02:b5:ad:
fa:cb:c7:b6:79:f1:74:6d:6f:7b:63:59:0a:1c:ac:
e5:4e:7d:bf:f5:32:ac:1b:95:e8:21:e3:a0:7d:0f:
0d:07:63:2d:73:de:2f:72:c7:39:ed:98:4e:e1:fa:
76:66:dc:df:23:9f:88:c2:3c:92:d8:1b:04:99:ab:
9a:48:92:e8:2e:c3:c6:70:3c:cb:bd:ef:0b:37:ce:
16:6d:ff:13:34:45:79:e0:a2:b4:d2:aa:f7:03:2d:
c5:4d:1e:18:90:fe:a8:5b:cd:78:2e:95:33:15:4b:
09:38:05:b3:8b:67:00:fa:40:8d:fe:af:07:b3:7b:
ef:5d:0c:c5:da:0b:23:ba:87:a3:55:8c:57:ca:62:
ae:29:e5:e2:57:e0:3b:a0:4b:9d:d6:f4:0e:a0:79:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:9E:BF:E7:25:46:A7:33:7D:24:5F:CB:51:94:85:37:AF:E9:82
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/29b3caa9-6470-45c4-9283-9836b50ed0d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
94:b0:d1:ae:ba:a2:09:16:56:06:d1:98:81:03:9e:81:b2:dc:
2a:e9:c3:86:fe:e3:7c:9e:b8:d8:a9:fd:9c:fa:ff:f2:5a:c5:
15:eb:dd:a9:4b:c8:29:71:5f:a4:cf:84:08:da:50:ae:59:57:
33:b3:85:0a:7b:41:a8:c9:50:21:ca:c0:3c:9c:82:d9:75:00:
a0:50:50:a1:f6:12:2b:ef:9c:53:e5:be:2e:f4:f7:8a:aa:0a:
c1:6c:67:8a:47:c5:39:9e:c8:87:28:11:17:dd:94:a7:e6:a8:
70:fc:28:a4:f5:73:07:b2:c6:b0:b4:38:22:fa:8c:27:2e:5d:
c5:f5:da:ce:75:a6:3d:eb:57:e2:7e:41:a0:9d:dc:09:0d:9a:
d7:cb:9d:ef:67:1a:ce:e8:10:f2:36:72:a5:82:4d:6f:03:ed:
cd:d1:4e:2b:d9:71:de:c0:e9:8a:d2:f8:d6:3f:5f:ab:b5:2f:
9a:6a:ed:fb:73:86:0a:2f:d8:67:4d:76:8e:43:19:38:8a:43:
55:1d:9f:45:18:78:77:8f:9a:d1:aa:a1:e6:d9:43:49:8b:19:
a1:e6:70:f2:f3:44:a3:3b:9a:b6:e9:3c:19:09:68:60:aa:33:
4b:3a:7d:d5:d7:a1:29:82:0b:4f:6b:7a:96:57:7a:8f:49:c5:
5a:86:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:48:36 2025 by rpki-client