Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
File: ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa (raw, json)
Hash identifier: JdbBezYEOV0xOUe+UirPyIpK+yamB/WPFSOV7UagML8=
Subject key identifier: D0:64:B2:46:8F:89:F8:CE:51:76:C5:D1:5A:4A:DD:66:D0:8A:DD:2C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 466EBC7A4B8C8D4642E2F9E6393E78931C300AEC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
Signing time: Wed 05 Mar 2025 18:00:04 +0000
ROA not before: Wed 05 Mar 2025 18:00:04 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6e:bc:7a:4b:8c:8d:46:42:e2:f9:e6:39:3e:78:93:1c:30:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 18:00:04 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:38:9d:f7:52:9a:1c:12:b3:57:79:91:f6:
84:b2:5f:5b:32:f9:c6:cb:1d:54:23:61:2e:92:2d:
3b:f5:d6:b9:32:fe:61:9d:55:75:08:8c:0a:36:f3:
4f:68:37:24:68:be:e8:cf:76:33:e8:81:48:09:df:
d6:7a:7c:98:58:cf:d2:9c:76:00:f3:0d:04:12:2b:
c6:29:64:3a:0c:07:b1:f6:76:cf:fc:cc:c0:f5:33:
da:d1:04:1f:4f:2f:ab:8c:26:e9:37:16:10:c4:45:
a2:67:e0:0c:c9:fe:99:66:5d:00:89:cd:c6:1a:2b:
af:6b:9f:a1:8a:09:c5:ff:ff:6b:fa:89:37:5b:f4:
57:e2:f0:9d:ab:42:69:d2:f3:f7:20:e0:06:0d:d4:
fa:94:61:31:af:02:98:64:4f:41:12:d4:41:9c:a9:
6d:a6:84:1a:7b:d7:06:67:53:69:1d:85:64:5e:d4:
55:89:e6:42:c7:af:b7:94:15:58:89:53:4b:c6:7b:
23:48:d4:5b:98:90:bd:f1:71:d1:0a:30:3a:d7:34:
72:62:74:ad:72:dc:6d:2d:87:c0:97:54:28:82:7b:
e0:72:f8:5c:f8:b6:d6:86:36:9f:6c:b6:81:15:c7:
3f:f1:e6:8f:00:56:1d:ac:98:50:9a:ab:0a:73:fe:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:64:B2:46:8F:89:F8:CE:51:76:C5:D1:5A:4A:DD:66:D0:8A:DD:2C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:94:ad:c7:ec:fe:17:09:2b:85:dd:8a:b8:1f:cd:7c:46:af:
d0:88:78:79:eb:20:0a:94:31:97:80:be:13:be:c0:a0:2f:dd:
d9:9c:ef:f8:6b:cd:6b:03:91:0c:fe:71:7a:3f:5f:ef:3b:3c:
eb:e4:02:61:c2:56:3e:f5:01:98:6d:d8:91:f5:a1:98:a4:1e:
e7:45:df:db:ce:40:d0:32:e9:91:15:71:2e:47:41:4c:55:50:
4b:45:5f:a6:91:14:20:a4:ed:2b:2c:15:56:60:90:aa:52:0a:
ed:c0:fd:1f:36:70:7b:55:f3:5f:19:a7:44:c3:ef:c0:c6:9d:
d5:6a:95:1e:82:2a:94:37:b3:59:ea:c9:a5:6e:05:a7:c4:30:
f2:51:e0:08:f6:75:fa:1e:1a:fc:d1:58:7a:5c:51:0b:86:f4:
ad:d2:fc:77:d8:7e:b9:2d:40:a0:16:8b:c7:3d:a2:2f:d1:92:
9d:5e:18:b8:8b:23:62:de:a0:62:08:d4:4a:44:fc:ec:e8:d1:
71:6e:f1:69:ec:c1:5d:9e:54:48:62:25:28:26:1c:a7:d1:af:
a4:06:03:04:63:05:67:41:2b:53:b9:08:a0:96:67:c4:6a:c3:
93:0c:ae:d2:3b:93:5b:6c:52:34:db:6f:84:46:58:c7:bc:3c:
0c:fd:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:49 2025 by rpki-client