Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
File: c5b27928-f79b-49c0-80c5-88852eab11e3.roa (raw, json)
Hash identifier: zcGZvCjt+DdFlbS+pwZErOlo7lKPUPq9Fa+MH118FyQ=
Subject key identifier: 01:BB:9B:0C:D0:3A:C8:AC:BD:49:2B:3C:31:1F:1F:95:5E:78:A9:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 30608556DB9CC1AB11BC61EBC04B3729BF4D75AD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
Signing time: Wed 05 Mar 2025 17:51:20 +0000
ROA not before: Wed 05 Mar 2025 17:51:20 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:60:85:56:db:9c:c1:ab:11:bc:61:eb:c0:4b:37:29:bf:4d:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:20 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:19:ce:29:9d:f5:01:f8:82:0b:aa:ad:a0:
54:af:66:22:51:28:2e:29:af:b1:0e:b4:85:b3:cf:
2d:34:0b:88:91:bc:bc:00:e2:97:48:bc:0d:57:62:
2a:6c:04:58:64:5e:91:8d:9a:60:12:4e:d1:33:5e:
ce:04:9a:30:0a:35:7d:92:11:f3:4e:82:62:42:8c:
aa:75:33:69:71:63:2a:0d:50:fa:54:05:47:ea:78:
d2:77:24:fe:0f:c6:a7:63:e5:a9:78:33:9d:d2:c2:
f0:93:d3:87:56:d0:5e:27:b8:fb:17:47:03:b5:ac:
f2:25:0b:80:50:6a:13:96:4c:3d:4d:4c:9f:a8:15:
7a:cc:81:87:3a:71:36:a8:15:75:4f:7e:de:1c:7c:
9f:46:69:7c:2e:ed:5b:ea:5a:94:fd:ee:e6:89:e1:
91:94:e9:fa:84:87:e7:74:75:c9:84:35:51:f3:94:
5c:68:54:30:c6:af:f6:9a:58:34:e4:d6:42:5e:89:
7e:5b:30:b7:75:56:a6:c3:4e:66:bf:65:9c:94:74:
be:01:29:97:3d:61:95:6e:35:aa:b6:16:d2:9a:03:
34:d9:83:cd:ed:39:97:33:bb:13:87:05:9c:12:eb:
f5:f4:42:0d:ca:59:03:db:7f:ba:9c:62:e8:c5:00:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:9B:0C:D0:3A:C8:AC:BD:49:2B:3C:31:1F:1F:95:5E:78:A9:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
60:78:8e:67:7b:34:8a:c9:28:d6:20:0c:24:4d:f1:b2:5a:11:
5b:a9:50:0c:1f:ca:2d:a6:54:7a:5c:67:b5:c5:93:c7:33:9a:
30:75:c8:27:f2:31:e1:4e:d3:2f:e0:b6:fd:30:4a:27:d8:eb:
7d:56:8d:9e:e2:75:2e:8c:81:66:5a:96:96:78:57:9b:4e:a3:
b2:d6:ea:1a:bb:54:d9:e7:a2:0b:61:17:91:3b:6b:e5:98:69:
9f:97:38:ec:97:c1:52:0b:02:66:d8:77:d9:32:70:ca:5a:7c:
c8:60:3c:75:73:24:3d:f3:02:17:00:ff:ef:d6:91:30:ca:92:
90:8e:7f:46:cb:9b:42:69:70:13:ad:90:ed:73:b4:68:b3:23:
1c:e4:39:e2:ff:c8:d3:6b:82:49:f9:16:06:39:2c:f5:52:21:
c7:35:df:06:7e:a4:07:0a:50:d2:b8:14:e7:72:5a:fe:43:35:
e1:5d:d6:84:45:dd:d4:d4:ef:92:2f:83:55:97:29:7a:e1:7b:
57:a7:93:5b:29:0e:ee:a2:bd:db:4d:3a:40:78:ca:29:2b:e8:
3e:88:73:c1:46:23:44:bf:8e:e7:08:6e:ad:1e:c0:58:eb:01:
66:5c:ad:56:c7:79:1b:4a:7c:e4:e6:59:77:d7:ec:7b:f0:aa:
ee:d6:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:59 2025 by rpki-client