Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cf5e86ef-0733-4056-8b1b-683470ef90f1.roa
File: cf5e86ef-0733-4056-8b1b-683470ef90f1.roa (raw, json)
Hash identifier: f+36an9UWXcC4mnpwTwWPQu0WW/dBrXhoDsXGeP1iHg=
Subject key identifier: 02:DE:88:66:7C:1A:7C:A4:5C:B9:10:95:06:2D:22:00:D0:36:32:3E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 63898BDF2FDD2D1A37C93018853F603F79181A56
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cf5e86ef-0733-4056-8b1b-683470ef90f1.roa
Signing time: Fri 07 Mar 2025 15:10:51 +0000
ROA not before: Fri 07 Mar 2025 15:10:51 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:89:8b:df:2f:dd:2d:1a:37:c9:30:18:85:3f:60:3f:79:18:1a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:51 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:a3:f9:c8:dd:a2:a7:90:00:65:cc:d9:2f:
7d:fc:6a:4b:71:0f:03:4b:a5:a5:f5:5c:5f:0b:73:
43:70:63:58:10:01:73:34:c0:63:96:3d:86:fe:16:
02:e5:69:ff:b6:0e:97:68:3e:3f:da:5b:61:8b:ee:
37:41:80:f2:12:18:3e:b1:d5:5e:bd:60:9a:78:0e:
e2:41:4a:e1:99:c0:42:94:6c:38:47:33:ff:1a:9e:
9b:5f:99:c9:3c:17:28:1b:85:d1:c7:38:b9:24:35:
ab:85:16:3f:6e:60:d9:3d:af:ab:28:ca:de:5d:6c:
a4:51:8d:d5:db:06:f9:8e:f1:54:39:f1:2b:66:50:
40:90:d0:d7:a1:fc:61:a9:11:d8:09:af:27:20:d4:
cd:2a:57:68:26:90:87:ba:4f:ba:60:7c:0f:c0:d5:
0c:1e:57:93:d0:ff:f5:77:ca:77:4f:ba:03:9f:03:
79:71:67:f7:b0:0d:aa:ea:41:2c:3e:b3:c4:c5:96:
1f:81:3f:cf:d3:cc:38:cb:c7:37:7c:d7:a4:94:fb:
c1:b2:a3:ca:ac:da:d8:3b:ec:d4:10:fd:6a:f7:9d:
e8:74:6c:2d:3d:91:3f:41:99:22:0c:dc:fd:a1:45:
ef:45:e0:2d:6a:56:b2:19:d4:e1:ae:ce:34:45:6a:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:88:66:7C:1A:7C:A4:5C:B9:10:95:06:2D:22:00:D0:36:32:3E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cf5e86ef-0733-4056-8b1b-683470ef90f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.112.0/21
Signature Algorithm: sha256WithRSAEncryption
35:f5:69:0b:b4:ca:e6:03:00:b3:ae:17:a3:80:bd:66:db:c8:
2e:37:3a:cb:e2:a3:59:09:cb:9d:fd:e4:03:e9:b0:82:56:68:
77:b8:8c:a2:0f:fe:6c:d6:b4:ee:23:11:c3:88:8b:c4:c5:19:
6c:e7:2d:31:05:52:6b:7c:1a:a0:37:99:cf:00:46:9e:52:e5:
ce:39:bf:f8:55:51:47:f6:a2:3e:d9:dc:b2:ac:f7:16:3e:cd:
b5:46:1a:a7:77:69:e9:a3:15:e2:b2:68:57:64:98:0d:d8:08:
13:c3:4e:8b:b5:d6:3b:0e:5a:65:1e:3e:0a:14:8b:17:f9:0a:
c6:03:e2:3c:4d:9a:cb:42:a6:77:7d:c7:29:d0:d6:b9:eb:5f:
e8:04:83:6a:c8:99:68:91:ac:97:a8:f8:7b:13:0b:af:e9:cd:
95:52:66:b7:f7:a6:a2:44:20:09:1a:85:c5:6f:74:bd:88:56:
73:06:10:0c:d4:92:3d:6a:9a:be:eb:de:64:ce:58:62:b1:87:
c6:cb:8e:a7:88:72:23:1b:36:d5:36:4a:fa:27:a9:2a:b1:5c:
96:67:99:85:6b:59:2c:c3:37:62:39:7a:21:83:9d:98:60:92:
46:80:b4:fb:c3:86:20:d5:6d:3d:5b:2a:49:ea:f9:ea:ed:30:
0d:34:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:15 2025 by rpki-client