Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
File: 6b1fedd3-188f-4b29-88bb-0dce33df2464.roa (raw, json)
Hash identifier: jf7hdc3JKPNCviuUBuKhGzffpp6NcxmO0gloruYltp4=
Subject key identifier: 69:9B:24:F1:F5:40:A5:27:CA:2F:77:AF:5C:8A:EF:65:5C:B4:6E:67
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 61BA14C8BC5A085A146BDB1605BB125522F1010F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ba:14:c8:bc:5a:08:5a:14:6b:db:16:05:bb:12:55:22:f1:01:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:df:2c:e9:96:ed:f2:54:31:da:73:1b:09:
71:51:17:ec:b3:47:a3:e9:e4:48:5c:8c:82:7d:92:
33:bf:b7:0a:b8:98:22:5a:c9:ae:88:39:58:0a:3f:
94:0d:5c:5a:3a:0d:6d:ac:1d:68:5a:fe:16:62:73:
49:0a:b2:83:36:d6:9d:aa:14:d8:d3:c0:e7:9a:8b:
86:7b:52:e0:95:6a:b5:6d:1c:e0:79:33:84:6a:15:
ea:9c:ac:8a:2b:39:ad:7d:cb:2d:8d:a4:86:f3:0c:
f7:1c:23:d3:e2:36:8e:2a:76:fb:32:61:d8:97:a0:
2b:64:48:9a:b6:f0:fd:61:2d:a9:f1:fb:dd:58:ef:
63:06:6d:90:d4:d5:63:49:0a:e7:62:1b:e3:d3:ed:
92:80:62:fb:c0:61:95:ce:c2:57:4b:3d:38:82:0a:
00:c7:8b:5f:ab:45:57:ad:b6:0e:18:ae:2d:a1:66:
21:ef:d5:1d:eb:2d:77:ad:e7:20:64:ac:32:d2:28:
f7:f4:a2:f3:40:c2:fc:f8:93:b2:e5:f7:81:73:b2:
b0:f1:aa:ba:ae:e2:1c:86:ff:bb:1c:54:be:6f:0d:
0f:b8:90:ec:56:a4:53:8a:a8:bb:ab:55:a8:ed:55:
b2:bc:13:8b:1c:c9:ef:c2:f2:9c:98:4f:ca:47:f4:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:24:F1:F5:40:A5:27:CA:2F:77:AF:5C:8A:EF:65:5C:B4:6E:67
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:bd:08:30:ca:2e:55:f1:62:23:9a:5c:92:f8:c9:30:ba:73:
2b:8b:08:4b:9e:fa:e7:9d:bc:63:b4:c0:1c:69:a6:ef:ee:6f:
f4:db:8f:72:79:7a:40:21:28:43:01:c1:7c:3d:92:ed:29:13:
d3:97:03:43:64:bc:e4:1c:92:8c:27:68:91:11:76:6f:3f:06:
72:50:d4:72:ef:5a:c3:1a:eb:07:8b:22:f8:1f:98:a5:ec:7c:
f7:f3:56:62:2d:a4:cb:56:65:23:cd:aa:4d:7b:90:df:39:d7:
82:e6:0c:d0:94:df:53:67:64:3b:c4:f7:a0:28:ca:5f:e8:bf:
cb:f5:07:6e:6d:b3:e2:bd:e6:c4:25:4c:53:15:f2:4a:26:ad:
39:63:f6:9c:a6:51:24:9c:ff:d8:d7:c8:d3:cc:6a:80:db:ae:
a9:e5:b0:39:cb:74:9f:af:c8:25:7b:ec:c3:b3:b4:a8:53:bd:
24:74:28:6f:b1:41:10:03:24:4d:73:c0:8b:1b:ce:67:67:5d:
0e:85:76:31:ea:a0:0d:a7:63:a0:9c:80:de:b4:97:a6:0d:b5:
8e:a2:35:51:33:da:10:fd:66:6d:ef:94:d4:c8:89:26:f4:93:
2e:37:7a:ab:52:dc:2e:42:5f:cd:ae:cc:6c:82:4a:0c:6c:a0:
bd:92:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:36 2025 by rpki-client