Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa
File: b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa (raw, json)
Hash identifier: fQwAOxDC270mC3nNKOcrsKME8qIox+apf+rYNJcRRTA=
Subject key identifier: 2E:77:C3:51:7A:A8:43:8E:43:D8:F2:FF:4B:8A:85:2D:3F:C3:02:05
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0C52DB0665C325BFAE92D14800531B08C651D842
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:52:db:06:65:c3:25:bf:ae:92:d1:48:00:53:1b:08:c6:51:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:e4:23:89:d9:f9:ea:73:52:9b:4d:07:2a:
dc:fa:06:51:0b:cc:b2:62:e6:0d:eb:92:36:f5:f2:
c7:26:e6:4a:8d:ee:12:64:df:c0:0c:90:cd:ff:89:
e1:88:69:a0:35:4b:1d:39:59:f0:18:cf:6a:ea:95:
de:a3:9a:3e:75:37:26:04:bf:68:19:3a:a6:65:a6:
d7:f8:27:3b:e6:8b:6b:be:23:0c:97:14:c5:f6:73:
d8:4f:74:ac:0e:c5:06:ab:05:3f:8c:dd:fc:18:b9:
0d:76:94:89:2f:50:e7:f0:e3:bb:2b:09:06:a1:4c:
a4:68:c7:3c:09:83:ea:38:60:5b:d0:cf:53:7f:11:
fd:91:e0:22:19:7c:84:19:28:4a:f8:ae:62:3a:5c:
02:80:88:b4:f8:a8:76:31:72:a6:f9:3d:b7:06:ea:
34:6f:e4:65:98:ec:e9:5b:9d:b2:98:f0:14:50:0e:
02:85:9f:10:28:db:9f:f3:f2:8e:f8:14:79:c3:ed:
c0:2f:a5:e1:b2:38:fa:7a:07:3b:5d:79:f9:49:95:
a9:0b:81:a1:a4:06:ab:ce:38:cc:a9:a0:97:1f:4d:
a4:6c:bb:f5:19:5a:6b:4d:ad:cd:17:7b:9d:2e:b6:
97:9a:e5:36:08:17:0e:63:af:c1:b6:63:21:54:14:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:C3:51:7A:A8:43:8E:43:D8:F2:FF:4B:8A:85:2D:3F:C3:02:05
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:aa:4d:da:04:3e:5c:f1:01:ec:59:22:01:e1:6f:80:67:e1:
b1:77:46:3d:96:eb:89:9f:ac:d7:d6:48:78:36:32:1b:66:b9:
1f:ae:8c:71:93:e1:09:f6:be:2c:6b:cc:86:75:84:8a:5b:4a:
b7:97:b4:9c:07:90:c7:e5:e5:38:d2:d6:82:f0:9e:30:4d:3c:
d6:ba:8e:0f:cb:33:b7:71:75:4f:89:f8:19:af:07:65:b1:25:
97:5d:e3:2a:24:96:be:77:cf:44:e8:3e:b1:bf:6a:44:42:1d:
84:f8:95:f0:45:69:fe:c9:c1:3f:90:d3:69:4a:10:7a:fa:2c:
59:95:4e:04:56:52:6a:17:ca:18:42:ae:73:99:b4:22:2e:8a:
ff:7a:05:01:2b:60:36:e0:3c:7a:cc:e5:63:a7:a3:a6:cb:5a:
9f:08:3b:6f:ae:b7:0a:a3:f0:87:ad:c1:72:cf:48:ac:32:7d:
1d:aa:08:b3:3f:33:75:97:d6:db:cc:c2:0b:17:9c:37:5b:53:
25:f9:1e:47:16:25:9a:6f:9b:6b:31:93:0c:c8:c2:0c:21:c0:
a3:5f:bc:c3:31:e1:c4:c7:ab:aa:85:89:f7:32:90:5f:5a:e6:
da:8b:49:c8:8e:7a:d5:1f:3c:ba:03:f4:9c:13:88:11:97:af:
9a:2c:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:13 2025 by rpki-client