Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
File: 7764f303-17ca-41de-afb2-e2a4278e047f.roa (raw, json)
Hash identifier: tXJGJFY2Bs6pW/EoGUcRHUGrDgALe0iLnkVm8ctfqh4=
Subject key identifier: 05:4E:EA:B8:68:7B:76:5A:0C:7A:80:4E:1C:F5:30:AF:6B:B1:7A:B0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47CCA78A31F073CA58D42B854451C9BA3A9101D5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cc:a7:8a:31:f0:73:ca:58:d4:2b:85:44:51:c9:ba:3a:91:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:7c:9e:9a:b9:d6:fe:a5:1e:56:b1:1e:f4:
86:35:0e:98:5e:91:37:0e:16:8a:53:af:7a:e7:63:
cd:74:f2:9b:8b:9e:5e:b4:63:7f:52:8f:b6:2e:b2:
c9:af:65:b3:a7:4b:c9:f3:bf:4d:4f:15:ea:2c:71:
29:3c:64:ee:b4:fd:b4:a0:6c:3a:68:3c:d7:95:ed:
ba:56:c2:70:2e:9d:b2:62:60:a6:0a:b6:cb:0d:74:
bc:82:55:f7:ce:60:ce:0e:5f:b7:13:d7:d6:9e:dd:
23:c3:fd:c0:3a:1d:c1:3e:bf:e4:5a:1b:87:f0:12:
ef:af:be:a0:ba:bf:a5:19:6f:92:f8:ee:4c:45:2f:
d6:ae:6a:8c:27:87:61:a8:a2:ad:bc:f3:b1:68:1d:
e2:50:15:0e:6c:ec:d7:06:72:41:86:f4:3e:17:8f:
43:cb:84:5f:33:c7:bc:18:5b:b6:0c:63:bf:c8:16:
24:58:5d:92:34:b5:f8:fc:6b:eb:8c:0e:41:fa:64:
f8:16:08:be:37:c2:dd:86:1f:a0:d8:60:f7:f6:01:
e2:f6:56:97:f9:f4:a7:d5:36:2d:52:fc:72:37:a0:
4a:ed:88:f1:51:a7:18:8a:05:eb:85:78:49:47:26:
ab:b0:4e:ac:fb:e9:76:e5:8e:5e:f2:21:04:91:d3:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:EA:B8:68:7B:76:5A:0C:7A:80:4E:1C:F5:30:AF:6B:B1:7A:B0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b9:11:11:6e:08:87:91:79:11:fc:ea:cf:08:d2:96:c3:1d:f1:
8c:ea:6e:91:89:ce:44:66:ac:1f:b0:d0:63:74:a7:7f:7e:e3:
d3:22:ef:9b:0d:3f:a7:f2:a3:b2:c0:28:96:d5:06:55:4f:05:
24:6d:cd:82:94:1f:71:28:17:a1:db:b1:e6:02:9e:c4:30:e1:
ee:89:35:a5:6d:f8:e0:10:3a:68:dc:f7:ab:9b:98:be:53:1a:
23:fc:e0:dd:03:ca:88:c6:5f:b9:fc:ce:25:75:fc:6c:16:e6:
e8:6e:62:f4:85:0f:f5:b5:ea:0c:ea:d0:0c:02:ba:64:96:a4:
5b:3d:87:d6:e0:dd:63:36:f4:a4:18:d3:04:d9:7a:cf:c0:74:
d0:74:11:a3:a2:1d:2b:6f:45:48:b8:cd:5a:51:22:05:65:8c:
18:43:46:fe:b7:fb:a6:1c:5d:0f:22:b7:4b:85:02:ed:2b:1e:
60:08:49:56:0d:84:4c:85:b8:f0:ec:74:90:b3:95:c4:9c:6e:
83:ad:49:68:de:d7:6a:33:1f:21:63:1b:ac:77:42:a4:cb:24:
4d:31:ac:17:77:2e:15:57:3a:6b:59:69:55:3b:45:d1:b4:1c:
36:8b:30:96:85:88:3a:ce:6e:96:52:7f:67:97:89:6a:07:0b:
aa:53:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:07 2025 by rpki-client