Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
File: 37cafa51-a122-4dc3-9462-83922f031bb7.roa (raw, json)
Hash identifier: /H9EwwfJe6V4oKHXpV1cX9EitwKHjJGNYJJh56S1wk8=
Subject key identifier: 3F:BE:6C:56:9D:19:F3:37:F6:74:5F:FA:85:45:01:57:DF:22:A0:1D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4D3063770D6D57897F56CC7B575A2F031038BC7D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:30:63:77:0d:6d:57:89:7f:56:cc:7b:57:5a:2f:03:10:38:bc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:9d:d7:82:ee:4a:5d:fc:08:17:3a:1d:ac:
3e:39:78:2d:18:d5:3c:06:54:4d:b1:50:33:c2:55:
0f:f3:60:8a:1e:7d:64:50:72:ed:9d:8a:0d:3a:a5:
8d:12:f5:20:2e:a8:f8:94:ae:48:de:7b:7b:39:27:
a5:6e:3f:b0:55:bf:af:75:cb:c5:ce:24:b6:e3:4b:
56:4b:5c:37:7c:a9:95:e4:bd:7b:d3:6e:33:cd:61:
59:27:0b:a4:6d:4c:19:e3:02:4e:2e:3a:1c:36:d4:
c4:b4:2c:6c:ba:14:77:a8:39:ff:b9:88:4e:c9:f5:
ca:bd:58:e2:51:f4:79:a2:10:6c:56:4d:c7:6f:2c:
73:a3:f7:f6:1b:23:9a:be:a5:8d:ed:4d:89:5d:8c:
f7:7e:f4:28:6a:b7:3f:71:16:8f:ca:51:f0:3f:dc:
9d:09:94:6e:06:57:20:d5:6c:c0:ed:5b:51:b2:21:
6a:2a:40:dc:7a:1b:64:fc:7f:45:81:72:98:0f:f4:
82:f3:70:65:52:d2:ed:05:e4:ce:87:cf:08:17:f7:
df:23:ee:5c:e1:5a:46:26:34:6c:f2:a9:62:ff:98:
e0:4b:ce:ca:e4:df:58:d9:ea:69:89:02:df:ec:f8:
b9:a7:4f:73:4f:d8:03:a5:1f:c3:3e:54:cf:7a:1a:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:6C:56:9D:19:F3:37:F6:74:5F:FA:85:45:01:57:DF:22:A0:1D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:a7:1e:59:54:62:81:e3:47:d3:11:a6:7a:67:e8:6b:48:a3:
f7:dd:90:21:7c:f6:35:1b:7b:4a:40:0b:74:6e:0c:6e:ff:50:
5c:9a:05:40:c9:c2:ad:d9:01:1b:8c:09:3d:d8:ed:5e:b0:56:
dc:1f:69:a7:69:ba:3e:78:0b:9f:a9:f3:c0:b1:52:81:9f:a1:
54:6e:dd:85:c2:33:91:cf:3a:48:a4:34:f0:e8:4e:a7:50:bb:
60:7a:9d:4f:85:db:d9:f5:78:b7:a1:3d:56:4d:35:bf:04:a2:
d5:5e:97:70:7c:43:b8:94:29:b6:aa:73:51:d5:6f:10:cd:b0:
6c:d9:80:4f:79:44:3e:be:08:0d:11:4b:5c:f4:20:d0:3d:26:
df:d8:0f:94:90:3d:86:b8:56:0b:8d:56:2a:84:50:88:b9:04:
96:ae:8b:2e:64:28:6d:ed:ae:31:73:cc:ba:51:13:fd:a8:78:
55:3c:87:2f:45:dc:7d:e7:24:ce:73:37:5d:3d:74:bc:e1:ad:
f4:08:29:98:ea:8b:d4:4a:a3:4f:56:f0:6b:b7:69:9c:96:0a:
df:67:24:1f:a5:ad:10:76:6c:55:4f:d5:e5:47:5d:8e:84:2e:
e4:83:56:88:63:72:93:7d:46:5a:cd:f7:27:19:29:19:05:7c:
47:df:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:43:40 2025 by rpki-client