Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f5ffdac-d36c-4a69-b456-6de77be3057a.roa
File: 4f5ffdac-d36c-4a69-b456-6de77be3057a.roa (raw, json)
Hash identifier: 87606X3WkRycn7S3wzvAbXGI9FXcJ5g/eBdJJp30Xuw=
Subject key identifier: 5A:A9:F1:E6:7B:EF:3F:F6:50:0E:B0:FC:29:6F:5E:14:B8:5B:1A:E2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3A925E8E813E0D503B01A58C00E39D7FA0439F80
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f5ffdac-d36c-4a69-b456-6de77be3057a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.228.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:92:5e:8e:81:3e:0d:50:3b:01:a5:8c:00:e3:9d:7f:a0:43:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:9f:ed:89:3b:65:61:51:49:ae:ec:9b:36:
71:b1:80:b3:54:dd:a0:d6:65:7f:16:c7:03:d0:35:
47:f4:24:3e:73:14:6d:19:7d:86:14:ba:3d:70:d3:
48:51:03:bc:c5:8c:b0:e2:73:33:b1:32:6e:ec:c8:
55:ab:96:2a:1f:64:81:1d:ca:a5:69:12:6e:16:6a:
ea:75:63:ae:ac:79:5f:76:78:c2:12:8d:91:60:c7:
b7:59:45:e6:f9:5b:39:16:16:7b:9d:16:e1:e4:a1:
6b:05:90:8b:0a:f2:9e:a2:64:3f:48:99:df:40:02:
f6:90:2f:1b:15:15:63:d9:ba:66:d7:13:5b:44:3c:
1b:28:6c:47:53:f0:37:65:4c:c0:2a:e3:fe:96:42:
70:85:f5:64:b4:fd:ee:65:40:da:bf:db:6d:f9:f2:
59:ee:ef:e1:b5:2e:6d:d2:fa:c1:41:f0:94:4e:db:
9d:69:85:87:f7:22:06:22:63:58:83:af:ea:e0:13:
0c:9d:b8:74:c9:5c:6b:9b:66:7a:5e:0a:e4:94:db:
59:92:7c:1a:61:75:36:2e:b3:b2:04:c1:cd:7f:ca:
f6:3b:e2:11:2c:d8:a0:c5:3c:93:2e:28:2d:59:01:
c2:cd:31:ae:45:e3:0a:06:f9:6c:37:d4:14:e3:f5:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:F1:E6:7B:EF:3F:F6:50:0E:B0:FC:29:6F:5E:14:B8:5B:1A:E2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f5ffdac-d36c-4a69-b456-6de77be3057a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9d:c4:97:c5:24:cd:d9:7e:78:05:80:eb:c8:f3:72:ce:cc:e3:
bf:ad:b0:e0:71:69:cf:a3:0a:6b:01:50:3e:dc:ee:ec:ff:ab:
05:f9:89:8d:26:f3:4a:7c:b3:1b:82:8e:8c:5a:81:a6:0a:cc:
a4:71:44:d5:95:ff:02:ff:fa:50:87:4a:c5:e9:06:85:1f:98:
b0:52:b4:9a:af:b0:c5:af:6b:64:11:3f:31:7b:8e:45:cc:64:
ec:08:c5:d4:26:83:d2:99:f1:bb:56:73:a2:3c:4f:3f:c5:46:
c3:e9:ff:ce:15:6c:c0:65:29:30:df:b2:cd:a8:a8:e0:f0:4c:
8f:12:97:ae:d4:3b:0d:d0:7c:d7:b0:e0:04:b2:16:e3:06:96:
0d:2a:ce:30:0e:b6:31:5b:6b:3c:02:a9:75:ca:98:c8:75:8c:
43:ce:bb:cc:52:2a:52:13:5c:09:06:f4:c9:87:0c:76:b2:23:
2b:83:63:35:a6:78:75:37:83:7f:06:ac:1d:6c:18:99:80:33:
2c:bc:e9:50:8e:e3:90:b2:64:93:3c:f6:86:66:a3:d7:b7:5b:
11:27:4a:05:c8:ff:2f:eb:71:c0:4f:fb:7e:66:62:e7:f8:8d:
dc:78:33:9a:b5:f5:d5:1d:ba:f9:c7:78:fa:c0:85:e1:d6:76:
3c:dc:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:40 2025 by rpki-client