Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
File: 3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa (raw, json)
Hash identifier: eKjIl8bFvQ5mQg+J3vMcBCKT6uezlNjE0nnjWs8a2Ho=
Subject key identifier: E2:E9:DA:23:56:FD:C3:9C:73:D9:85:53:30:80:2E:A8:FF:92:17:2C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5006B1E966EE8F924EDBC97961694795871831A1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:06:b1:e9:66:ee:8f:92:4e:db:c9:79:61:69:47:95:87:18:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:ee:62:54:df:6a:82:52:67:35:72:2c:51:
b3:f2:d2:38:1e:dc:01:5e:dc:43:f2:5d:83:04:65:
f8:c9:b5:97:13:ee:c1:ed:98:64:f3:cf:8f:b6:12:
f5:a3:44:74:bd:3c:a9:cf:cb:ec:a3:a5:59:66:69:
d3:d7:e7:72:5a:7d:b3:a3:8e:f3:d4:b3:01:dc:c5:
9b:fb:24:d8:38:ce:e4:90:d3:27:d9:f5:aa:4a:db:
0a:eb:ba:49:f1:ef:9f:15:eb:cd:ec:ad:3b:1d:cd:
05:a2:41:90:33:23:e5:f2:5a:07:55:33:2f:a7:57:
af:84:95:dd:f4:4b:13:8f:72:5f:7f:83:85:6d:9a:
79:a7:50:5e:98:91:ab:7f:bd:b2:6a:6e:08:46:e4:
30:2a:4c:20:bf:5d:65:dc:33:b3:d4:0c:44:c8:fb:
06:07:7c:0b:79:b5:07:53:5a:0d:b7:66:92:ad:03:
14:17:8c:39:52:47:15:d8:81:f3:f0:97:6c:da:27:
d3:ab:89:54:82:02:40:f4:22:62:57:2b:1a:04:63:
cb:92:df:54:a8:54:16:7f:08:34:86:19:a0:90:3f:
47:90:59:49:39:36:a3:1b:5d:75:91:9f:45:81:e8:
8b:68:a7:04:d4:7f:d5:da:f0:69:fa:4b:cd:5a:c3:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:DA:23:56:FD:C3:9C:73:D9:85:53:30:80:2E:A8:FF:92:17:2C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3c86c38d-09c9-4098-8bf9-481ff8385b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:32:de:92:02:5e:69:ec:b5:2b:60:d3:4f:58:7e:56:9d:37:
0c:02:2f:85:cf:36:34:14:4b:07:e4:57:25:48:5a:a8:7a:0a:
73:27:39:ee:d7:14:6f:10:5f:c6:b0:72:6e:4f:39:4c:bc:af:
1a:b1:ce:4b:a1:3b:e9:85:84:a9:4f:91:db:41:77:29:27:c2:
b3:54:36:7c:ac:fe:a5:4d:02:35:fa:78:0f:bb:63:61:76:c8:
67:e9:10:d5:de:fb:cd:d7:2c:cc:12:58:8a:b2:f9:44:6e:c7:
92:b3:a1:f8:37:b0:8b:0f:fd:4d:9c:28:9a:fb:7f:38:4d:39:
f2:dd:fb:cc:9c:f0:f5:02:f7:3d:8f:89:dd:8f:0d:35:7f:41:
6d:c1:8f:b2:83:a2:eb:aa:5a:99:bc:06:81:bf:f6:01:1d:9a:
db:3d:d9:70:96:3f:0d:5d:96:99:d2:80:a4:9e:31:53:1b:b6:
5f:24:f5:bb:be:e7:78:f2:97:4c:d6:b8:7d:6d:54:19:c9:fd:
70:33:68:52:48:dc:ff:d7:b2:1b:31:2b:fb:c5:85:4b:23:ac:
ac:68:9e:cd:ec:bd:ce:44:e1:ba:ee:1a:10:7a:40:5d:cf:7b:
4c:df:18:0c:ea:6d:03:5d:3d:62:2f:e1:18:af:14:b6:03:d9:
fe:18:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:13:07 2025 by rpki-client