Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
File: 54f9687d-a273-4060-846b-ce640aca7c79.roa (raw, json)
Hash identifier: /1y4HM5DhKrCxs+Xqh5wg1mND5Z+nf5+OuYM1ZpKaLs=
Subject key identifier: 4A:FE:FC:58:E4:C2:66:60:5E:95:29:66:F7:2A:29:9D:43:46:D9:DD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6C51E71D425A536D179926FAAB718C76F78CDA0E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
Signing time: Fri 07 Mar 2025 15:10:23 +0000
ROA not before: Fri 07 Mar 2025 15:10:23 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:51:e7:1d:42:5a:53:6d:17:99:26:fa:ab:71:8c:76:f7:8c:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:23 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:fc:8a:44:99:47:09:a2:9d:01:14:d1:39:
bf:f4:5c:a0:9f:21:ba:be:4b:f1:e4:8a:fe:c2:16:
ca:2e:9f:61:6e:64:16:a7:c2:78:68:19:e2:22:c0:
cb:0d:42:68:8d:77:92:e0:63:83:1c:ee:56:d3:b9:
aa:da:e1:a5:fe:d5:f6:2c:d6:3d:d7:e7:5d:ca:aa:
73:81:c9:61:71:bd:52:84:10:e4:77:fc:48:20:81:
e7:24:35:17:0c:2b:da:b2:21:57:60:8c:46:16:90:
7e:52:9e:62:73:ea:84:10:0e:03:92:60:5d:47:bc:
ef:0f:f0:2c:cd:51:b3:51:4e:1a:f7:17:eb:68:a8:
fb:57:2b:fa:6a:91:ca:33:dd:04:64:5f:e4:fc:9e:
07:3a:8c:91:5f:57:dc:8f:55:69:41:e5:8b:c8:20:
00:56:20:b3:e4:41:13:4d:9b:57:99:c9:6e:62:cc:
59:b9:6e:7d:1c:2b:c0:e7:ed:f1:a3:b1:63:f2:9f:
5b:0c:c7:1e:5c:d7:63:d7:ac:52:96:90:55:52:8b:
e1:64:68:36:ef:8a:e6:06:8f:34:97:94:53:e3:19:
67:4a:ff:3b:32:fa:ca:83:31:f8:af:75:b8:4d:33:
cc:9d:1d:a4:58:90:cb:39:2a:a9:2b:77:56:60:de:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:FC:58:E4:C2:66:60:5E:95:29:66:F7:2A:29:9D:43:46:D9:DD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a3:e6:23:ee:de:cc:59:88:26:d0:75:87:e4:a4:8d:5f:0e:db:
8a:f1:c4:a0:6a:86:6f:0c:84:85:f2:2e:a2:b0:14:56:c0:32:
07:f2:50:91:8a:09:22:af:ff:45:33:32:41:10:42:7d:09:f0:
f1:1d:5c:a2:55:93:65:f1:45:a0:5b:80:79:c8:74:59:f7:12:
22:ad:f4:84:10:d9:a6:d7:be:3e:b6:24:d4:7b:48:5e:d3:f7:
cb:16:18:a4:e3:00:44:ef:33:18:9d:84:f8:10:04:16:b8:30:
75:d9:2f:02:81:e6:12:53:a1:eb:81:fd:df:a8:e3:7c:20:59:
25:0a:cd:7e:2a:01:5b:1b:5f:01:89:b6:42:59:a3:7a:f2:dd:
61:4a:80:0e:84:41:91:b4:59:68:f7:32:09:cb:bf:12:be:bb:
00:41:ae:4c:8b:b9:f9:02:c6:54:f2:f8:1a:8c:31:3f:a9:51:
c0:bd:37:13:f3:01:f9:38:fb:49:74:d1:d2:3c:66:0f:05:49:
38:3e:4d:b5:4b:87:98:82:65:2f:72:71:04:32:9f:45:d3:67:
ec:58:26:90:67:7a:bf:72:19:43:02:d2:f8:88:c6:df:36:47:
2f:4b:b5:4f:24:1b:7e:0b:24:83:29:a4:4d:b2:23:c2:c7:40:
46:41:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:57 2025 by rpki-client