Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/582a854d-4985-4bca-ae2a-4cc422726702.roa
File: 582a854d-4985-4bca-ae2a-4cc422726702.roa (raw, json)
Hash identifier: MCafx988OHHagkFeYyi/A4a9MkuX4HPgmJWjP2dRRDc=
Subject key identifier: 74:A9:BA:FD:08:42:08:9F:C8:5F:72:A5:7B:66:F6:79:91:68:10:DC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 319F31B0D9C0FDA9A6D9CB2BEECB14896219A482
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/582a854d-4985-4bca-ae2a-4cc422726702.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9f:31:b0:d9:c0:fd:a9:a6:d9:cb:2b:ee:cb:14:89:62:19:a4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:08:c0:db:70:2b:39:05:db:76:69:ed:5f:
59:31:9c:72:f6:e4:6a:e2:5b:5b:5a:41:1d:66:23:
d4:b0:0e:9e:c1:77:70:dc:c3:cf:91:a7:6c:e5:c9:
ba:a4:78:60:be:95:fc:ff:60:58:1a:59:5b:77:46:
8f:39:24:31:90:d1:09:27:16:6c:ab:1f:d3:12:bb:
f4:94:0f:ec:b3:5a:66:00:6f:28:de:dd:94:13:55:
46:ee:b2:2c:cc:f6:3e:6c:e5:fe:10:88:0f:62:8b:
83:81:8b:e9:39:0e:7d:d9:87:b6:23:a3:6a:2f:2b:
4e:20:61:30:8a:6e:27:b9:50:01:f6:2a:58:91:13:
3f:a3:87:22:ef:e0:6f:10:1d:02:35:5f:5e:0d:09:
ae:7a:a2:b5:0f:be:3c:57:f8:f5:3b:e0:ba:ba:9d:
83:a4:df:01:ac:52:f6:0e:7f:0b:a1:ea:00:f0:3c:
56:33:e9:4a:0d:ee:48:b6:d7:41:d9:c6:0e:32:b0:
9f:2c:45:64:4b:97:86:80:c7:f7:35:90:90:f3:25:
fc:52:08:e1:30:6b:f2:62:12:b4:52:57:77:1b:57:
85:97:30:ab:df:1b:13:a5:83:49:81:0a:09:a3:fe:
af:bb:03:70:1f:72:63:99:ec:a6:e0:45:d1:7c:81:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:BA:FD:08:42:08:9F:C8:5F:72:A5:7B:66:F6:79:91:68:10:DC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/582a854d-4985-4bca-ae2a-4cc422726702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:76:20:d2:44:eb:44:3a:27:b4:e7:2d:e2:cb:20:d3:29:c3:
7c:2c:d3:00:58:3d:b8:af:a4:ff:60:3c:9a:ab:a1:63:db:38:
05:c4:0a:03:84:86:b7:2e:86:3c:0c:89:ae:2f:d3:73:b5:64:
ff:a2:06:27:f7:f2:c7:36:da:07:94:98:c9:c6:4c:03:0a:f9:
d6:d3:d8:a6:a0:b5:5b:4c:b9:78:7c:c0:a3:65:ea:b7:c1:b3:
56:c2:db:c9:91:fd:9b:c4:6f:37:be:80:77:17:e7:ed:07:16:
d0:4c:77:d6:8d:03:ab:80:ae:b5:f0:b8:27:60:37:9f:35:c5:
10:b9:43:6d:83:d9:2a:ff:ce:51:0a:01:95:79:80:21:bd:02:
48:9d:66:78:c5:82:d1:12:cd:ad:33:9f:26:25:7f:73:20:32:
0e:9b:85:4e:3b:a1:99:07:ae:70:9a:e5:67:98:a0:32:64:21:
e5:c0:a1:d1:e3:b0:a8:26:8b:45:b5:df:c0:dd:d0:6a:d0:27:
f0:39:93:47:ef:71:ce:f2:fe:39:f6:04:7c:9e:f9:04:9d:2c:
89:4f:b9:da:41:c9:1e:fe:f8:8e:50:de:c2:22:98:d6:c2:29:
3f:91:c9:f7:1d:fe:a5:1e:6b:b1:9f:bf:94:4e:40:54:08:48:
6c:f0:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:37 2025 by rpki-client