Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/78e385a6-a7b8-4e63-8222-9119ad4d303f.roa
File: 78e385a6-a7b8-4e63-8222-9119ad4d303f.roa (raw, json)
Hash identifier: JqHM0AZMHsmFWURHuNQ6E1PZdak56VFJlK6KsAedlxA=
Subject key identifier: 6E:93:11:1C:66:97:FB:11:27:09:31:3A:92:65:A6:D5:48:EF:6E:63
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 30C4C962EC6794D7C67AE44EA10619AABAFADCC7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/78e385a6-a7b8-4e63-8222-9119ad4d303f.roa
Signing time: Fri 21 Mar 2025 15:10:05 +0000
ROA not before: Fri 21 Mar 2025 15:10:05 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.118.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c4:c9:62:ec:67:94:d7:c6:7a:e4:4e:a1:06:19:aa:ba:fa:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 21 15:10:05 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:05:55:18:49:4f:f5:73:ec:19:25:58:7a:
0f:c2:fd:eb:37:38:3f:39:73:76:bb:cf:b8:31:ca:
6b:e0:1d:5b:33:c7:fd:e2:5d:3c:aa:58:0b:68:4e:
f2:39:c7:dd:4a:53:8e:ae:d6:09:64:a2:e2:6c:71:
71:a8:75:7c:87:a8:60:fb:78:0d:8e:8c:6a:0f:8b:
62:48:4b:55:aa:e8:1c:99:ad:73:0d:bc:3d:94:0d:
df:3d:8f:d7:c4:5a:9b:0f:cc:02:e3:eb:da:7f:4e:
8b:84:7d:80:d1:29:7a:bb:86:ab:30:12:04:c9:dc:
7c:e9:4a:6d:5d:c9:82:bf:68:c5:21:89:ff:be:93:
53:fe:f2:1d:47:7f:d7:a5:f1:51:47:7a:c7:08:1d:
16:5d:e2:2e:8d:94:a9:67:58:d5:8d:6d:cc:1b:ba:
7c:9d:5e:12:cf:12:52:82:13:81:ad:e7:b6:29:6f:
22:8e:ca:45:6a:88:dc:fa:3d:33:06:a2:71:15:b4:
f1:9b:52:89:d6:31:f2:5c:8b:32:02:28:81:68:53:
97:99:70:54:7f:8f:1e:26:85:e2:26:07:23:57:50:
39:b2:fc:f3:28:3e:f0:e0:31:38:7d:9f:41:87:49:
06:cd:cc:22:27:57:7e:f5:84:c2:81:15:90:9d:62:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:11:1C:66:97:FB:11:27:09:31:3A:92:65:A6:D5:48:EF:6E:63
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/78e385a6-a7b8-4e63-8222-9119ad4d303f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5b:42:9a:4f:6c:c7:2a:6b:5b:8f:22:04:d9:d0:ad:dd:43:4a:
df:51:ce:6c:96:be:7b:44:d8:26:45:d4:cc:bb:d0:5b:ab:a1:
d7:d3:e4:87:49:7c:01:0e:5c:53:57:18:2f:28:6b:51:3a:12:
44:8d:5d:1d:ff:6d:ee:71:43:c2:c5:fc:f7:0e:ff:8e:89:3d:
d6:7e:94:c2:50:e6:03:cb:6b:d9:d5:f3:22:b0:56:14:92:b7:
90:e1:f7:db:93:83:9c:6e:a9:7a:6e:c5:aa:c2:85:5c:ae:53:
24:2f:f6:2d:28:99:e2:78:fa:9d:d6:de:44:90:1c:3e:1a:a9:
59:0a:67:e5:1a:62:67:95:53:6b:38:40:25:21:f4:ba:88:69:
0a:27:32:65:a3:23:d6:7e:e8:6a:a6:6b:07:63:db:77:00:20:
43:cd:f2:fe:f7:fc:be:e3:a7:fd:e6:3e:02:9c:0c:33:66:18:
3b:1a:ec:8b:a7:17:33:87:b8:5a:f1:c5:45:76:2c:46:31:2e:
5b:71:5b:b7:d7:00:27:22:a7:75:8f:e4:b4:91:2b:f6:82:58:
e5:92:fb:41:04:4b:b5:7e:da:5c:5c:f6:35:66:62:1a:de:4b:
07:f1:fb:a5:6d:a7:9f:a1:79:f7:4d:e9:e8:fe:8a:70:bf:f0:
45:3b:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:04 2025 by rpki-client