Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
File: 993731a0-abe8-41b9-bad3-ce7852d4f117.roa (raw, json)
Hash identifier: o2YaMxNl89FUw4xjn99dwI3bFS+/fYjP/r4Fd7ee2Cc=
Subject key identifier: 1E:6E:2B:DD:5B:55:A5:2E:B6:D0:81:CD:F0:09:F9:78:1D:8B:3C:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3B50973BFA9BF5BA3AFDFCF547FC2C0D3C42F6BC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
Signing time: Wed 05 Mar 2025 17:51:52 +0000
ROA not before: Wed 05 Mar 2025 17:51:52 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.34.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:50:97:3b:fa:9b:f5:ba:3a:fd:fc:f5:47:fc:2c:0d:3c:42:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:52 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:4e:0a:f3:25:19:fd:2c:44:b8:ff:a4:bf:
bb:9c:3d:14:17:db:6d:db:0f:53:f7:34:b2:fb:39:
7d:b2:5c:e1:3c:42:62:63:a8:25:ba:77:84:e3:8f:
48:56:d1:e4:d5:f7:2d:4d:89:93:cf:69:4b:7d:17:
a4:85:b8:62:af:e4:6f:6e:8c:75:d3:c1:16:e1:39:
a1:d0:51:4a:98:ff:39:75:ef:23:81:ff:eb:ab:12:
95:76:01:c9:a4:99:9e:20:e7:0e:bc:5f:a9:7c:67:
39:98:59:9e:e0:62:f1:08:5a:a3:00:a9:9d:31:78:
34:e2:95:c9:01:3c:ef:2b:2c:7d:4d:39:67:99:3e:
ec:e7:6e:39:1f:18:f9:13:bd:9b:4e:49:c2:aa:9d:
28:3c:c3:3b:20:bf:9f:71:2e:70:78:43:05:d3:24:
8f:f3:71:9e:62:4b:83:6b:8a:9e:eb:6e:71:f1:84:
a5:4f:34:e1:91:20:d1:3e:79:0c:88:fd:b7:45:96:
73:f6:54:7e:ba:96:1b:a9:aa:29:4f:a5:e5:3c:e6:
57:81:48:3c:cf:64:15:6f:33:5e:96:c8:2c:1e:77:
51:e1:77:7a:e7:36:f2:60:85:7e:e5:60:f8:c7:6c:
09:22:3b:a6:50:c5:6e:25:89:9b:2a:53:80:ce:51:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:2B:DD:5B:55:A5:2E:B6:D0:81:CD:F0:09:F9:78:1D:8B:3C:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c7:25:c6:75:b1:e8:9d:95:ef:78:da:f5:ea:d3:a0:3d:f9:4c:
70:a9:63:3e:28:f8:c6:0d:2e:a2:d9:a2:94:ee:c5:67:17:f8:
4e:42:91:e4:73:19:4d:59:ec:8f:98:ff:77:56:aa:9a:a8:06:
ea:b2:38:dd:e2:34:d9:57:98:f7:4c:6d:35:f3:d0:17:72:3f:
09:01:2e:d8:f1:94:0e:06:f2:88:60:9d:14:85:48:39:cf:2d:
73:4c:2b:c3:62:73:94:58:05:08:f6:e1:fa:7e:1f:ce:a4:e7:
fd:97:d0:a6:17:fd:c8:f4:32:a5:f3:8e:19:69:61:3a:99:ef:
f6:ae:e2:21:3e:c5:f1:61:27:43:0c:e2:96:bc:32:ae:66:66:
90:07:8c:60:c4:f0:ed:a2:f8:67:f6:ec:99:c5:b1:cc:91:e3:
56:13:fb:e6:93:f8:47:2c:0d:8a:a5:96:1a:33:71:15:1b:d1:
3f:ed:a2:69:c0:ff:84:1d:68:06:a8:d2:62:6a:ed:89:61:a9:
12:f2:40:e6:ad:bd:44:82:35:10:20:bc:ef:a6:bf:85:69:29:
71:4e:80:73:ae:48:84:e4:44:8d:14:11:f7:9c:e1:70:47:87:
f7:d1:16:9a:ac:a0:73:30:5b:f1:6b:d3:26:90:51:5e:b5:bb:
0e:3a:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:53 2025 by rpki-client