Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
File: 3113975a-2f82-4201-a061-176481f88265.roa (raw, json)
Hash identifier: sHMZrKYDlLRyeobv7zvEMzkGrzI+3vCzYW566pMpyiQ=
Subject key identifier: 6B:68:22:0B:FB:A2:D2:DD:98:03:C9:E5:A6:54:B6:C9:36:28:2E:DD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6836D5BC4E9F7A21A527E915D5342546E26F7457
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:36:d5:bc:4e:9f:7a:21:a5:27:e9:15:d5:34:25:46:e2:6f:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:0b:ab:e5:70:b9:fc:a5:b0:37:85:cc:c8:
3b:39:66:f2:b4:17:b6:57:6b:2c:07:b1:0e:de:c8:
51:8c:7d:f4:50:8c:41:3b:02:2e:e2:0d:86:cd:24:
e3:2f:bd:41:3e:b7:16:df:db:b2:af:8f:42:d2:72:
8a:74:64:39:84:24:d5:06:ff:7f:ee:fe:0e:ee:74:
4c:91:4a:f6:49:d3:ec:7d:b1:0e:f1:f2:20:32:f3:
33:92:21:07:bb:46:bf:05:9b:da:62:5d:0b:66:dc:
d4:e8:15:21:0d:2f:1e:39:18:4d:61:77:d2:3f:df:
4c:1b:a4:a4:71:0e:dc:e6:69:8d:a8:e6:a0:24:af:
c0:49:e9:76:bb:7d:9d:9b:91:1d:58:f6:45:70:8c:
ab:dc:1a:31:21:9f:b7:ee:a8:c2:f9:af:1f:68:3c:
10:c1:87:db:7e:24:2e:ef:89:cc:8b:74:3c:10:55:
bf:53:a8:65:9e:3b:39:5d:44:ec:ab:c9:7e:5f:fc:
b5:56:84:38:bc:35:b2:88:3d:5d:a0:10:b7:a4:7d:
3f:e9:61:fb:c3:8a:49:c8:ab:a4:2e:7a:c2:5d:7f:
f6:94:37:24:12:3e:56:62:2e:01:ac:bf:a7:16:dd:
81:a4:ca:a9:28:28:4e:b1:f0:09:69:42:22:a1:df:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:22:0B:FB:A2:D2:DD:98:03:C9:E5:A6:54:B6:C9:36:28:2E:DD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
34:70:5c:c2:f3:24:44:54:3b:ce:0e:27:d8:01:b8:3a:a9:f2:
09:50:76:b8:98:06:8d:cf:98:44:36:aa:22:78:fc:35:6e:01:
22:5e:7d:ff:b8:3e:02:67:c8:c4:8c:4e:5b:6a:8e:3a:16:c9:
27:96:c4:91:8d:77:59:d9:c9:2b:62:79:09:93:79:c7:0d:f0:
cf:83:3e:48:14:39:e1:46:ef:ed:05:47:78:68:26:8e:8c:70:
21:ed:61:53:c4:3e:ca:1f:f9:7d:e9:5a:4a:7e:08:99:d3:16:
ae:4a:49:ef:ec:16:a7:0a:16:84:87:c3:66:16:41:3b:9d:1a:
81:da:85:88:5e:fe:b8:0a:09:a1:47:ba:2c:72:a1:e0:50:3a:
de:63:a4:dd:69:1f:c7:2e:7b:93:97:85:5a:c4:50:76:87:46:
e5:dc:b0:03:e4:ee:db:c9:72:74:a6:a1:81:15:39:73:fc:71:
8e:8b:81:af:7a:18:38:f6:b3:a9:bd:94:a4:49:41:90:00:b3:
75:ea:66:59:34:ad:92:0c:9f:7f:b9:98:e8:4e:e4:35:0d:c6:
08:f7:2e:e5:58:06:09:18:1b:ed:8c:26:24:82:ee:ec:fb:04:
38:59:f9:ca:82:60:9b:b6:0f:48:c0:49:3e:10:d9:98:31:cd:
0b:fa:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:20:01 2025 by rpki-client