Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ccc6fe8f-1de9-480c-ae02-2a627e6b3e4a.roa
File: ccc6fe8f-1de9-480c-ae02-2a627e6b3e4a.roa (raw, json)
Hash identifier: rip4Eqe6cf9Tbp8+36Y1wJ1bONBIkstWgJf7ZTVBKG4=
Subject key identifier: AF:69:D5:B9:81:12:C5:6E:1B:EB:4B:7E:2E:8E:3D:8F:CE:7F:00:39
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 142F97DC97E7342F3A389C337473EE6D10BC36B6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ccc6fe8f-1de9-480c-ae02-2a627e6b3e4a.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2f:97:dc:97:e7:34:2f:3a:38:9c:33:74:73:ee:6d:10:bc:36:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:6d:55:01:01:df:84:7d:98:e9:50:7a:fe:
e9:6a:f0:4e:71:ed:f6:fe:93:b6:8e:2f:8d:cf:95:
27:42:95:25:0d:c8:06:c4:4d:56:ff:55:d9:5f:6a:
a8:5c:6f:e3:07:2b:44:90:c4:a1:e0:8d:7c:d2:2c:
4b:e2:22:25:fe:86:1d:46:2c:22:77:05:6c:46:98:
d3:a4:99:fe:ee:ad:a9:32:bb:43:59:89:3b:a1:c9:
2b:d1:24:94:50:04:9f:c0:e3:05:74:08:9f:5c:4c:
a7:e1:34:46:24:97:3e:41:c5:86:aa:75:8a:fd:f9:
a9:6a:ef:a1:18:35:d6:ba:73:10:40:62:05:d7:5a:
d1:59:10:6e:5c:a2:d4:4c:d0:30:b5:44:3f:a0:f8:
1b:57:67:42:5e:55:d6:de:54:83:31:8d:01:fa:a7:
f2:a9:95:9b:60:02:9e:96:40:95:25:c3:28:fc:7c:
d2:7f:9b:89:4b:3c:e2:41:2c:04:75:5f:21:0e:9f:
6f:2d:b9:93:bf:eb:06:ca:18:3a:9e:78:fb:a4:fb:
54:35:0e:94:c1:87:56:98:01:49:3d:76:04:ea:f9:
86:18:20:2e:89:b6:c1:78:d5:bd:b3:9d:cb:39:6b:
9c:ac:f1:5e:25:42:4a:18:7d:fa:28:27:c3:0c:85:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:D5:B9:81:12:C5:6E:1B:EB:4B:7E:2E:8E:3D:8F:CE:7F:00:39
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ccc6fe8f-1de9-480c-ae02-2a627e6b3e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:8f:9e:95:8c:ab:ef:63:d0:72:92:32:52:41:05:f4:79:33:
35:ed:fa:aa:50:6b:b4:01:3e:9a:23:9a:60:21:a7:2a:6b:02:
51:1e:3e:69:44:9d:f6:23:24:ed:ca:e5:a5:0a:ec:02:48:13:
c3:a9:fd:a4:b6:5a:d5:4b:94:5b:3e:ae:6c:06:f0:ad:82:98:
7b:ec:49:18:ba:32:bf:e9:a0:c3:f5:e5:57:64:df:dc:88:59:
07:55:40:7d:22:c3:d4:87:ef:19:93:d9:b8:84:f7:16:ea:88:
ff:7d:ae:72:1e:07:b8:db:69:6b:25:ee:74:7a:4a:ea:4b:ea:
97:b3:ac:fd:a7:81:63:ba:7d:db:6d:0d:91:37:24:bf:66:83:
4c:80:d2:73:1f:22:05:2b:9d:24:6d:56:77:ce:04:d1:bd:94:
b0:8e:31:51:07:21:fc:80:6e:49:db:d2:f2:e9:08:b6:1f:6b:
36:bf:f5:17:bd:a5:41:2e:32:ea:5d:c9:09:bd:66:ba:b7:04:
db:69:e7:81:ad:d6:e4:1b:36:02:73:5f:e9:06:2b:6e:ce:35:
41:15:12:3f:ff:c6:6d:5a:fe:a3:0f:dd:6b:1a:67:b0:69:86:
20:f7:91:89:10:73:2d:cc:ff:a4:08:fa:de:96:7b:cf:7a:96:
96:2d:2c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:42 2025 by rpki-client