Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
File: 7438d445-a5f7-4e01-82a2-5975f6fc967c.roa (raw, json)
Hash identifier: /9hlCfKz4zPoNvAp0eFGkIy7/4eQ3+wLH+jgYPJFOk0=
Subject key identifier: 26:0D:5D:A4:96:6B:97:B7:6F:A2:3C:40:64:83:C5:BF:E5:C4:39:31
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 362D3CD7598B999323605C2D575D779282F6DCCC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2d:3c:d7:59:8b:99:93:23:60:5c:2d:57:5d:77:92:82:f6:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:41:d5:48:b8:a8:9a:4b:42:d2:1b:97:1c:
8b:01:2e:dc:26:1c:a2:4b:49:ff:f3:4c:2d:09:ee:
fb:b7:90:7f:55:9c:12:68:f4:fa:bf:d5:25:d0:36:
2c:57:23:96:f3:ca:93:ce:74:64:df:1c:8a:6e:72:
8a:9c:e3:d1:b5:31:82:ef:dc:73:b4:4b:fe:48:12:
37:88:7f:52:91:ea:9d:01:5a:80:ce:66:88:98:47:
c3:f9:53:d5:05:1a:37:6e:3d:db:32:04:e9:54:4a:
52:28:d5:61:74:fd:cf:ab:be:17:c2:01:d9:4c:3f:
c8:17:66:4e:c1:c5:cb:ef:4a:f3:4f:ab:10:17:a2:
92:6d:0a:eb:68:81:c9:14:5a:d9:49:44:b9:10:3e:
1b:5a:79:7c:fb:ad:ea:22:5b:3e:97:63:d8:a8:74:
05:0e:04:8b:b4:a5:41:ee:67:b8:34:fc:74:81:b1:
d2:c6:91:a7:b1:94:23:33:55:eb:7e:3f:f3:7a:1c:
ce:fb:ae:e4:c8:e1:96:2f:82:74:36:6a:4d:bf:1a:
a7:46:42:54:11:bf:26:5d:cc:1a:25:d8:68:d6:d8:
44:2c:87:81:fa:61:bc:4e:93:73:d2:5f:0c:f0:c1:
47:64:2b:69:7d:ff:46:a3:32:c8:5f:98:d7:65:ef:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0D:5D:A4:96:6B:97:B7:6F:A2:3C:40:64:83:C5:BF:E5:C4:39:31
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:dc:cf:7b:42:66:61:77:fa:84:c4:86:66:50:49:2e:20:ac:
4d:41:aa:b0:48:52:bc:3b:51:5d:0b:24:3c:19:42:33:db:ef:
62:32:0e:d2:ba:16:29:7e:62:3a:44:c0:75:35:7b:a3:f8:82:
bc:de:f7:04:fa:8d:c4:6a:19:43:99:78:5a:10:ab:db:3e:74:
33:53:f2:3c:bc:8b:2c:b3:a9:3e:f8:63:c1:8a:25:9a:74:4b:
6f:9e:0f:dc:50:db:d6:10:34:59:a6:bb:56:2a:17:df:e6:5a:
98:ff:ba:b0:93:e6:f5:82:72:fe:cc:e7:8a:c5:3e:32:86:18:
a8:53:b9:55:53:62:bd:d1:8d:55:dc:3e:86:4f:7a:0a:57:7c:
9a:21:7d:76:dd:ad:3d:22:ff:67:51:dd:dd:cf:4d:7d:4c:91:
03:b4:5e:3e:81:87:67:df:8c:62:da:0e:a1:db:5c:63:da:39:
30:04:d0:24:27:36:bc:b4:99:f1:a4:bf:1c:7f:ea:e4:9d:42:
99:b2:72:7c:ed:a9:8d:40:3a:ca:d4:a6:6d:50:ba:d1:39:bf:
e2:08:24:49:1a:02:8b:60:67:9c:ed:f1:a7:51:5d:e6:18:0b:
6b:08:46:9c:03:02:ac:9f:21:f3:19:31:ac:e3:a8:87:13:a5:
59:2f:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:38 2025 by rpki-client