Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa
File: 4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa (raw, json)
Hash identifier: S5Fl4QDHYEow2jSlEV8VM86TpInAheL5PYjJ8Tfd6OE=
Subject key identifier: E7:BA:84:CC:04:50:F4:56:2B:3C:4E:20:AF:B7:7B:3D:81:E5:68:0F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50122D7C016596BFE88397968731808EB4B72146
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa
Signing time: Fri 07 Mar 2025 15:10:48 +0000
ROA not before: Fri 07 Mar 2025 15:10:48 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:12:2d:7c:01:65:96:bf:e8:83:97:96:87:31:80:8e:b4:b7:21:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:48 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:ed:90:91:a9:47:8b:c2:1a:0f:59:c1:e7:
ba:f8:d2:7a:15:2b:6e:24:e1:b5:da:6c:12:8b:49:
33:0c:b2:93:c3:3a:be:25:47:93:27:ec:7e:e6:7a:
05:ec:24:ba:9b:e7:ac:9e:59:f5:4f:56:56:1d:04:
99:c3:71:37:91:6c:6e:7c:f7:ee:14:1a:58:19:f1:
1b:86:40:f8:ce:0f:ff:6d:a2:fd:f6:d2:78:81:85:
8e:7a:95:e2:2c:aa:d8:c2:eb:24:23:f3:f2:1f:cb:
cc:43:1a:a5:dd:11:60:b4:c6:ba:5c:ab:4e:35:d8:
02:ff:6d:86:44:0c:ec:de:89:06:90:33:5b:91:67:
06:4b:0b:dd:c3:ed:c4:ec:2c:23:54:07:e7:91:ba:
9b:7e:b2:ac:ea:95:87:95:4e:41:d4:20:d7:27:71:
f0:e0:cd:9b:58:9f:0a:d2:ef:f9:fc:1d:71:97:f2:
c7:98:37:74:ee:57:12:c5:ba:63:69:8b:eb:d3:ab:
c3:0b:9f:be:f8:1e:0a:ab:6c:8e:36:dd:70:e6:2c:
20:da:08:b4:70:b7:7b:96:ee:c4:8b:9f:6f:a4:ad:
5e:76:89:43:71:19:a3:37:b9:58:ad:49:12:e9:bb:
f7:14:7d:90:17:73:d6:c9:75:24:85:89:e7:d5:27:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:84:CC:04:50:F4:56:2B:3C:4E:20:AF:B7:7B:3D:81:E5:68:0F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:20:07:40:8a:f3:e9:94:c1:87:0a:64:75:b5:5b:61:23:a3:
6f:49:72:72:3c:ab:56:d2:6d:bd:ea:ac:be:51:7b:14:22:2b:
67:6c:24:75:1e:fa:51:93:13:36:68:d7:7f:d0:24:81:a4:c0:
00:5b:f3:e8:6d:d7:e8:b7:b8:96:22:f5:97:23:cd:11:b5:4f:
0a:1c:9a:8b:61:c0:e7:64:27:d3:2c:9c:66:bc:75:1f:41:bc:
d8:1f:77:8c:8d:c0:a7:f8:4c:2e:3c:a8:7e:3d:cc:35:86:75:
4c:f7:01:ee:bb:08:62:f5:7d:fe:4d:43:02:da:2c:0b:8e:a2:
98:69:8e:53:10:6d:11:54:77:73:61:95:44:97:3c:3a:ad:fc:
10:cd:78:d9:93:35:9e:7d:dd:65:4b:bb:05:4a:42:45:44:92:
09:2c:f0:7f:bb:35:f4:5a:ae:b9:10:36:cb:e1:26:96:a6:83:
61:04:bf:56:11:48:68:01:be:da:5f:61:8e:0c:3e:b6:d1:e4:
f6:98:d2:86:96:44:c4:18:4e:84:15:1a:75:22:b3:cb:f2:ca:
eb:ba:c7:03:86:64:7b:15:03:52:bb:2c:ff:29:f0:2d:f0:f0:
88:54:3a:b3:40:88:4c:21:ce:8d:ff:33:35:ea:89:e8:6b:c8:
ac:1d:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:16 2025 by rpki-client