Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
File: 5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa (raw, json)
Hash identifier: Sb7uga2u/lHpQPt4zg+7F4YPfZ1RffKd5n1j0v/tYDw=
Subject key identifier: CE:AE:97:88:CB:BA:05:70:0B:E9:5D:1F:86:43:D1:C4:5D:05:D6:A1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4512D04120311512841FAA5A466FAC36184BE07B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:12:d0:41:20:31:15:12:84:1f:aa:5a:46:6f:ac:36:18:4b:e0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:85:13:65:88:98:39:01:b1:3d:83:50:c3:
fe:b0:39:07:53:e5:69:49:16:d2:1c:18:5e:d0:dc:
10:83:a2:f4:19:fa:47:52:f9:9f:7a:d2:98:2e:5e:
eb:da:04:30:9c:72:7a:13:f4:3f:7a:8b:eb:b5:5d:
67:1d:53:f6:9d:44:ed:f0:01:cd:5f:9a:12:5d:f3:
ca:4d:f2:f1:b8:7a:81:f8:ec:68:57:7a:46:1f:54:
6e:30:30:e1:81:3a:15:27:04:81:10:e2:0f:68:d7:
17:e1:54:ea:52:8c:44:30:df:8a:ee:3f:9c:4f:e2:
a1:fe:c3:bb:10:3f:c4:8a:6c:0e:a1:b9:84:0d:d7:
2e:d2:36:cf:15:21:4b:9b:3b:37:12:5b:00:42:23:
b5:4a:64:98:e5:e1:45:c2:3b:2a:db:9b:f1:12:fd:
42:c6:fc:20:38:55:09:23:94:e4:b5:d0:40:df:01:
31:60:36:de:d0:9e:3c:ba:5b:6b:5e:49:dd:b2:19:
5f:95:b9:0c:d3:74:ee:4d:6a:41:ae:da:e3:21:88:
63:36:a5:38:4a:60:0b:1a:a1:2c:1f:78:6d:86:ad:
82:d2:e3:7b:63:04:1f:2f:3d:08:b9:0e:0a:9a:3f:
2b:b2:d7:9a:a8:fc:6f:74:03:9b:d0:5d:01:f6:b5:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:97:88:CB:BA:05:70:0B:E9:5D:1F:86:43:D1:C4:5D:05:D6:A1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:75:7a:b7:e3:20:9e:18:f6:07:ca:bc:9d:04:b4:15:b2:3c:
fa:ba:99:26:69:44:3e:c9:87:a8:08:5f:64:05:20:b7:2f:25:
52:b5:f1:b2:9c:5e:f2:66:02:73:9d:75:c2:ab:f2:80:96:bb:
9a:f7:a8:0b:df:1c:63:96:4a:29:e6:48:68:e0:1a:80:46:29:
5f:2a:2f:ed:be:ec:4b:12:b5:30:8c:b5:53:54:a5:4e:20:cf:
95:78:88:89:e3:04:79:02:d9:fa:6c:b6:a9:89:83:57:60:9d:
94:6e:d8:46:64:4a:8f:5b:5e:b4:75:0b:d0:ff:6d:20:4d:9e:
25:c2:dd:b6:d6:6e:ce:5c:f0:11:01:9d:0c:8d:7b:77:ba:6a:
9b:97:25:73:4d:0b:9f:d6:3d:35:d1:9e:d6:2b:e6:3f:c9:67:
db:a0:9f:14:7f:f0:de:2c:6b:ef:61:ad:60:9e:b3:93:39:b4:
d5:e3:01:18:8f:f4:21:dc:54:2b:5d:de:20:5c:85:1d:9b:c1:
ab:53:9d:8c:5c:d7:ce:0c:d8:b7:71:36:9b:de:d1:a9:a7:a0:
81:7c:00:c4:f2:ce:a9:d6:7c:a6:d0:5d:98:01:25:52:6b:c7:
7a:d5:7c:e8:17:4c:65:18:f1:33:e5:6e:f2:b4:99:92:d4:0b:
70:71:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:50 2025 by rpki-client