Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
File: 83d64fad-2f6b-441a-9079-e9e60d149aec.roa (raw, json)
Hash identifier: ZFFfQT7PE++fQc1YaLrs3sPctL3mRoiK8V62/a99fBo=
Subject key identifier: 9B:6C:7F:83:6A:9C:79:CE:51:8C:AE:EE:81:F9:CB:A1:CE:C9:55:81
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B0A0457DB3FE4B72A0A4E88E72FA0A5B9A87F96
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
Signing time: Fri 07 Mar 2025 15:11:00 +0000
ROA not before: Fri 07 Mar 2025 15:11:00 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0a:04:57:db:3f:e4:b7:2a:0a:4e:88:e7:2f:a0:a5:b9:a8:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:11:00 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:aa:64:94:45:6a:79:8a:d8:57:be:db:c3:
d0:b0:ff:26:93:bb:bf:1f:8e:38:7d:57:6e:58:f6:
ab:dc:96:24:f3:36:0c:e9:2c:18:11:73:6e:5c:c6:
13:91:b3:6f:f9:11:8e:b9:e6:7e:2a:cf:bf:5a:06:
2c:e1:b5:66:13:f8:20:f5:b7:9c:93:17:44:18:bb:
eb:55:af:52:4c:a6:44:03:20:38:62:95:6c:61:83:
c1:d2:ca:04:63:6c:1d:fa:78:01:30:56:42:13:e9:
6e:f0:0c:94:ae:75:be:8c:07:29:7d:83:81:73:6d:
d7:ae:47:dd:95:97:76:69:07:1f:e1:07:b2:b2:43:
45:d8:e0:c4:ae:4e:d0:b5:e3:f3:89:df:90:cf:49:
04:d4:9c:08:ee:94:e1:70:09:68:11:c5:43:1d:27:
36:ea:c3:da:5e:07:1f:1c:a1:62:8e:8f:14:3a:21:
38:07:4a:be:3d:f7:cb:1a:50:ac:7a:2f:50:fd:de:
84:79:a4:59:a2:30:0e:af:89:80:2b:ca:8a:74:37:
dc:e5:4b:0c:50:33:15:d3:56:5b:22:f1:6d:c5:6f:
6c:05:52:9c:80:ad:c2:74:49:46:7a:23:c1:f2:e9:
6b:28:f3:bc:50:65:bc:2e:25:55:d7:32:be:97:ef:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6C:7F:83:6A:9C:79:CE:51:8C:AE:EE:81:F9:CB:A1:CE:C9:55:81
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c0:40:0d:fe:f7:b8:57:5d:42:70:60:e4:67:58:4b:ba:40:
5e:8e:54:47:f1:b7:ca:e4:7d:3d:5b:c6:18:3b:21:12:ca:ec:
ed:4a:0d:13:fe:2c:86:ca:60:e3:72:76:16:0d:ba:94:7a:56:
f8:b5:37:08:33:89:c8:68:7e:fe:38:d2:48:48:95:71:71:41:
8a:8e:82:e6:b4:b7:51:3b:25:0c:62:22:c2:19:1f:86:68:ae:
d9:db:a2:10:34:a2:f2:96:c4:dc:39:09:c5:41:bd:01:01:a3:
4f:21:50:88:0a:ba:2d:ca:a2:2d:34:15:1b:f7:5d:8e:59:1c:
7b:d5:26:51:be:05:27:69:71:16:91:64:db:8b:c2:fb:76:fb:
7a:09:34:89:0f:d4:89:47:cd:24:4b:9d:30:a2:de:c7:b0:c5:
2a:e6:e1:1b:74:9e:26:c0:c9:fd:8c:ec:f5:8b:4a:eb:bd:75:
bb:dd:c0:fc:d1:c4:cc:ad:f6:92:30:f8:e0:d2:1c:ad:75:19:
16:02:4b:d4:40:66:99:fb:91:37:eb:a3:a1:f5:6d:6b:94:96:
b9:7e:b0:8a:7b:41:c3:76:e2:9c:9a:ab:a6:62:3d:b7:80:ee:
ef:15:36:1e:18:6f:80:c3:17:c2:0f:1b:d0:78:1b:66:a0:47:
17:63:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:09 2025 by rpki-client