Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4aa77dd3-124e-4b95-8bd3-8fd6e186613e.roa
File: 4aa77dd3-124e-4b95-8bd3-8fd6e186613e.roa (raw, json)
Hash identifier: eScgbuc9va99t/XzRwaNnHtp5fnLncin4c75V84UMSg=
Subject key identifier: B8:A5:EF:79:DC:F8:DF:D1:C3:63:22:FA:1A:25:30:B9:57:95:38:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5317B2731148565DD810659243C190F720CC4654
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4aa77dd3-124e-4b95-8bd3-8fd6e186613e.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:17:b2:73:11:48:56:5d:d8:10:65:92:43:c1:90:f7:20:cc:46:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:99:55:90:60:92:ff:e4:09:cd:16:7f:fd:
f9:7f:42:80:9b:1e:44:7c:b7:1e:cc:cb:aa:36:23:
83:35:1d:72:fe:4d:a9:7f:69:66:51:b7:6c:65:7f:
e9:9f:e3:f0:5f:32:c0:bb:31:bf:a7:3d:6e:a8:98:
39:bd:4e:0b:d2:42:59:df:9e:cd:1c:4e:39:00:33:
d5:e3:44:09:d1:da:f1:31:65:16:28:8c:b5:26:8a:
35:52:da:84:34:34:d0:2f:cc:76:a3:4d:ac:5e:c3:
35:11:b6:71:fd:eb:3e:38:1f:fb:da:31:8b:69:01:
d1:80:08:d8:76:1b:b3:8d:48:2c:f6:79:28:51:aa:
73:29:ee:9b:7e:08:0e:78:33:8f:7f:96:e0:61:d9:
53:71:a6:fd:82:ba:b8:5c:96:63:94:0c:6e:1a:da:
56:7f:aa:7f:60:61:ad:54:95:c7:e0:f1:11:b9:52:
a4:dc:9f:a2:1b:30:80:de:c3:0d:7d:21:d5:6f:8d:
ed:fa:38:92:7c:8f:1f:7a:80:87:22:10:bd:d5:dd:
ba:aa:fa:bc:c7:9d:b0:ff:0f:80:1f:86:47:39:40:
ad:02:4f:eb:9d:b8:a2:7e:57:47:e9:49:4e:c3:f8:
fc:42:be:52:ca:4e:25:fe:78:36:38:7f:29:00:7f:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A5:EF:79:DC:F8:DF:D1:C3:63:22:FA:1A:25:30:B9:57:95:38:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4aa77dd3-124e-4b95-8bd3-8fd6e186613e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:40:c1:8e:7b:f1:a1:f6:a9:28:fc:85:36:84:3d:f8:9b:32:
0e:c8:e1:c6:9d:af:16:0e:78:d8:c0:7f:cc:90:21:16:3f:fb:
d1:54:a0:68:93:aa:21:7c:d8:13:81:93:2f:4e:71:6c:57:9d:
ec:d8:40:f6:57:69:42:37:30:c2:0e:28:ee:f9:f0:bf:91:dc:
9a:d9:73:4f:97:59:34:fa:ee:eb:e0:b7:74:3c:5e:0f:40:1d:
c1:8d:4a:62:bb:45:41:ef:f5:72:1f:43:9e:8b:3b:9f:1f:cb:
6a:1f:76:d9:9b:b4:a5:9c:27:0c:a3:b2:13:fa:6e:ac:c3:b0:
3c:17:b3:f2:8b:42:bf:2a:01:69:24:78:90:d8:e0:9a:bc:24:
bf:b4:9c:92:4f:d7:69:d4:85:6d:eb:97:ae:f8:94:7c:cc:23:
d6:2a:50:b2:8e:e7:4e:a9:3b:b5:61:ec:58:8f:8b:17:db:91:
4e:18:43:01:e8:bc:e1:6d:18:5e:f2:41:95:74:ef:82:3e:6d:
1f:3f:7c:7f:a5:52:fd:d5:db:d2:23:2d:21:84:b7:ba:06:0b:
d9:87:b4:ca:64:dd:26:2a:fa:91:7e:4a:f3:33:a4:72:4f:87:
fa:d4:ba:e0:3b:3e:97:93:75:99:ba:0d:41:5c:f5:5d:00:a3:
68:52:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:52 2025 by rpki-client