Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
File: af8582f5-d209-4e12-aacf-31186289c430.roa (raw, json)
Hash identifier: MHLsO7FfYDaxX1USNo3RjanDkCGTDqpiX65JV3UxF3k=
Subject key identifier: 82:D1:EC:49:8C:5E:AC:42:4D:27:1A:2C:79:7F:EA:50:A8:74:12:F2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6B3E41064A3B4F36DBBAC9AE71F49CAF4FE3C554
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
Signing time: Wed 05 Mar 2025 17:51:45 +0000
ROA not before: Wed 05 Mar 2025 17:51:45 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3e:41:06:4a:3b:4f:36:db:ba:c9:ae:71:f4:9c:af:4f:e3:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:45 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:fc:fa:be:e5:81:f8:f2:cd:24:3c:8b:49:
c8:74:dc:2a:b2:3e:fd:d9:1f:ef:33:9a:4c:36:f8:
94:c0:60:3a:9f:59:a3:4b:54:c0:90:29:b3:65:16:
63:1a:32:3d:42:cf:e3:bd:b1:c3:00:3b:3a:0a:40:
8d:68:4d:19:ce:94:2e:c8:9d:a3:78:ef:b5:db:63:
db:60:b4:73:3b:d9:28:01:27:3e:e6:a2:3b:25:24:
4e:fb:7b:9c:67:e9:85:59:29:7f:cd:44:c0:ba:e2:
93:6d:c0:5d:81:b2:4a:54:38:eb:20:e8:a6:c9:e6:
c6:f8:04:78:3c:d2:53:3e:cb:44:6d:61:aa:06:3f:
b6:35:8a:7c:3c:39:0e:17:a8:c3:66:ba:ae:4b:0a:
89:b6:3b:c0:2f:4f:d0:38:87:a1:a9:30:16:7a:9b:
08:ad:6e:42:05:e0:a1:57:99:22:18:5d:9f:36:c7:
b9:f7:d3:5a:30:dc:b6:1a:28:ca:cb:db:ca:c9:6a:
65:9b:7d:32:66:8a:ec:7f:57:2a:52:15:b5:5c:a2:
88:57:ce:5f:01:15:a7:68:22:e4:58:ce:35:b1:35:
f1:4c:b6:6d:bb:61:3c:2c:3c:03:19:76:f6:46:66:
61:75:85:81:c5:74:06:ea:ba:9d:53:69:de:fa:76:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:EC:49:8C:5E:AC:42:4D:27:1A:2C:79:7F:EA:50:A8:74:12:F2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0d:b4:fe:ab:44:96:02:c9:fc:95:ca:2f:d0:f2:2d:3d:f0:05:
2a:ee:a7:d4:f0:43:f3:1f:41:7c:21:2a:52:cc:b6:d5:f4:ec:
b7:0d:00:22:81:5c:47:3e:b8:37:d4:02:10:dd:53:f7:e3:1b:
8c:a4:db:6e:f9:ff:2e:0e:2c:d4:dd:6b:82:f3:fc:46:8c:b6:
b7:7c:75:19:60:54:0a:02:09:2b:9a:ba:99:b8:25:95:87:79:
04:6b:8f:f4:e4:8f:fb:d5:67:1d:f7:b3:04:80:37:f1:e6:32:
62:4b:0f:63:ed:da:4d:ef:19:45:0e:6b:91:a8:9a:68:f5:32:
1c:02:74:21:91:65:51:a8:07:89:d1:a2:a0:e7:60:4e:45:c2:
0d:c8:ca:c8:31:d7:e4:ca:aa:3c:20:b7:61:6f:fb:cf:96:f5:
f7:f1:a3:45:30:e2:cc:c5:97:7b:7c:c2:6d:97:41:18:b9:cf:
2d:cc:9a:27:ac:3d:07:7a:c7:ba:5b:cb:e0:87:64:2f:62:03:
a5:54:bf:0e:bf:aa:13:3e:74:98:76:e8:1e:51:a0:9e:02:40:
93:55:d5:85:12:4a:1b:ff:87:a6:ff:a8:38:c1:07:ba:71:b5:
6c:80:66:be:79:f9:3c:e9:56:7c:88:bb:06:7f:fd:9a:97:5e:
da:01:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:06 2025 by rpki-client