Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
File: 7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa (raw, json)
Hash identifier: vVG9B4jDR7N6AirTcCS0w4gP3XQcFa6THj38U2XOyUA=
Subject key identifier: 5D:85:46:99:FE:76:0B:A2:42:F3:36:99:C5:D9:61:74:A4:6B:E6:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57039BFC8B5A3290E45283DC2B72A2D6C9D42D3B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:03:9b:fc:8b:5a:32:90:e4:52:83:dc:2b:72:a2:d6:c9:d4:2d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:93:9c:92:ed:69:cf:da:39:f5:15:55:7f:8c:
e4:0a:93:7c:ac:4e:b3:f1:2d:18:53:9f:e1:6a:9c:
22:bb:91:f6:c0:00:74:64:ce:c1:43:4e:22:77:ab:
6e:84:c6:ef:5e:06:ff:97:f7:0c:d1:6e:6f:e6:86:
bb:54:c4:12:81:15:91:30:ed:8a:08:f9:8a:9b:26:
e7:7d:fc:ae:63:56:35:aa:7b:7e:aa:1b:30:e8:bc:
8a:03:14:68:76:56:31:dd:91:be:00:77:7c:61:3b:
72:2a:18:f8:89:01:2a:9d:5b:4c:d0:5d:53:0c:63:
6a:1a:e4:ee:a4:61:27:ba:bd:1a:ea:a6:46:2f:e7:
46:9b:e7:2f:07:ed:d4:f4:1b:71:5b:2e:ba:fe:40:
c5:c6:66:6d:03:a0:ee:b1:82:f3:04:91:77:2f:56:
0e:24:9f:9a:e7:83:ee:63:cb:e3:95:59:eb:c0:8b:
82:34:4a:35:6e:b9:42:27:87:c7:cb:27:4a:15:d6:
dc:26:7a:1b:96:e5:61:86:58:1a:a2:e7:f9:aa:6a:
1e:0c:51:da:46:fb:f1:6d:55:ae:c3:29:ba:fe:a2:
90:45:6f:3e:97:37:ef:87:b5:7d:f8:bb:09:95:ca:
56:f8:cd:18:34:74:4a:83:38:34:47:5a:f3:e6:50:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:46:99:FE:76:0B:A2:42:F3:36:99:C5:D9:61:74:A4:6B:E6:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:25:4b:ea:9e:0e:c7:0e:8b:ea:4f:ee:43:45:81:94:d4:e4:
b5:f5:81:e4:5a:ea:c1:0f:28:b6:33:8a:9f:32:dc:ab:f6:93:
0b:a6:9e:75:52:ca:ee:5b:0a:aa:e3:dc:87:4d:f4:be:23:9b:
6b:f1:c3:a7:98:da:9b:88:13:82:19:0d:af:f8:ee:71:3d:6a:
e8:a2:71:58:7f:d1:0b:f4:bd:15:10:a6:99:3d:cd:be:64:c4:
bf:18:6b:be:96:57:ba:46:e7:fd:83:04:1c:da:45:79:1e:65:
78:4e:61:a6:c8:cf:a2:ca:70:84:83:ce:8e:a9:ad:5f:f6:0a:
d6:20:ba:54:40:3c:4e:65:22:ad:8b:94:03:ee:42:1f:aa:37:
cf:82:17:7d:c0:7e:25:fc:d2:fe:bf:24:ce:01:2e:f7:39:5e:
83:0c:18:3b:41:03:67:07:5b:f7:e9:1d:7c:6d:de:af:62:6a:
14:75:e2:60:da:f3:05:2a:14:ac:66:13:0d:04:eb:61:d2:ff:
6f:52:aa:82:56:89:61:35:a5:39:12:bb:7e:ae:d8:7f:0e:cb:
36:4c:a2:9d:be:22:01:1c:4a:f2:6e:44:75:45:b9:9c:42:71:
91:77:00:fc:93:d3:82:1c:8a:96:ad:c1:ac:1f:7a:0e:a4:33:
00:2a:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:13:41 2025 by rpki-client