Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
File: c806309a-9e3e-4b0e-aad2-1356d070a437.roa (raw, json)
Hash identifier: ZI49dqzC+05iAKYHrejgCWLWSShoyPt/3lJoL5GnWYg=
Subject key identifier: 94:47:75:9E:AF:01:00:C0:9F:26:08:7D:18:0E:87:25:49:5E:BD:1B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 03AE7C3E3875A1A74870DAD5183EE13AE84836BC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
Signing time: Mon 17 Mar 2025 15:40:50 +0000
ROA not before: Mon 17 Mar 2025 15:40:50 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ae:7c:3e:38:75:a1:a7:48:70:da:d5:18:3e:e1:3a:e8:48:36:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 17 15:40:50 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:fa:0d:76:1b:21:10:ff:f8:e4:a0:7d:23:
80:0b:27:e1:d1:3f:cd:01:27:63:f0:f5:b0:8e:81:
dd:23:0d:15:53:b5:33:f1:99:6c:87:42:64:c1:af:
3f:25:57:78:53:f5:86:a7:b6:fb:38:d9:84:7f:39:
77:18:0d:80:b1:40:8b:24:54:cf:53:44:ec:bf:86:
72:25:12:49:1a:86:a7:26:77:29:f2:18:ea:5c:b0:
cc:c5:a9:75:18:9c:12:f4:8f:b4:b6:82:98:7e:d2:
32:13:d8:c6:e7:2e:6c:d8:83:b8:eb:db:cd:15:82:
ba:ca:db:fc:12:05:97:7f:5d:99:80:62:42:29:07:
ae:32:e4:ca:4e:90:80:ba:bc:02:18:d1:c6:7c:b8:
e3:e3:8c:bf:58:16:de:11:93:d5:94:56:38:08:78:
49:85:75:5e:d4:65:4a:50:51:09:87:d6:5f:c9:85:
e8:3a:a0:40:27:de:1a:2c:70:9b:48:cc:d0:f1:38:
fb:91:34:4a:6c:20:fa:6e:e2:66:4d:d7:6f:26:05:
82:24:05:08:fa:a5:59:34:c8:3f:ce:ee:9f:40:66:
8a:bb:a0:5c:1b:09:c0:b8:5f:8d:58:e8:73:1a:62:
64:5c:dd:81:e2:7a:77:a8:0b:31:2d:b0:45:06:ab:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:75:9E:AF:01:00:C0:9F:26:08:7D:18:0E:87:25:49:5E:BD:1B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:13::/48
Signature Algorithm: sha256WithRSAEncryption
37:f4:e8:db:40:34:8f:46:30:b6:15:9d:36:55:97:fd:b5:05:
5d:64:0c:76:18:bf:b1:5f:7d:27:ba:e6:85:05:0e:27:c6:cd:
e5:b6:29:d5:ea:1a:06:45:30:46:4d:ff:82:87:08:7c:58:08:
d2:53:f9:f5:f9:38:c2:5a:5c:13:02:aa:9d:6f:76:cc:ad:e1:
b4:c1:de:90:b7:c9:df:1a:14:52:2c:bd:a2:83:04:75:9e:1e:
82:31:2c:03:64:21:ad:82:f8:af:40:43:37:e8:cf:94:ac:bb:
48:3e:58:d2:33:78:72:db:36:d0:fa:aa:5f:42:72:3b:62:ce:
1c:e0:0b:c1:31:c4:8b:48:0f:f1:53:4b:12:94:73:a1:a7:c8:
c3:44:43:66:89:f6:86:c1:32:09:e9:c5:fd:68:1c:29:13:c5:
c7:1d:c6:64:6e:f3:12:2d:bb:ec:db:b9:24:98:6b:78:c2:98:
07:69:bc:97:30:be:db:49:c8:b9:c8:14:da:b4:34:37:d9:a5:
a8:b0:ee:1b:48:3c:50:6a:35:53:d0:1d:da:92:ce:38:58:c4:
72:80:bd:4b:7e:16:a0:57:e1:53:d6:59:59:38:e4:e8:3b:fd:
a2:30:31:a4:a8:d4:fa:ed:e8:d0:0b:11:9b:5f:21:9f:12:61:
c3:81:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:13 2025 by rpki-client