Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
File: d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa (raw, json)
Hash identifier: rZiG1PnBMw5lrDBxCG7O4A5M0w73o+FjqmjViCfvV84=
Subject key identifier: 2E:F7:BC:9A:D8:63:09:44:71:97:10:AC:36:2F:11:3E:E5:D1:96:DF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 55B428ACF0E3691884D716B15960CD1D789D5F86
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
Signing time: Wed 05 Mar 2025 17:50:13 +0000
ROA not before: Wed 05 Mar 2025 17:50:13 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b4:28:ac:f0:e3:69:18:84:d7:16:b1:59:60:cd:1d:78:9d:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:50:13 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:20:26:8e:2c:99:49:40:ca:3c:07:38:f6:
9b:10:24:d1:12:3d:16:f0:39:ac:a1:1e:2e:6f:4e:
5e:f3:55:7b:20:11:a0:4a:ba:2c:10:15:b9:b5:c1:
46:de:51:8d:f5:8e:80:04:0a:a8:80:63:0f:eb:bb:
d7:6e:49:32:f2:83:b4:0c:a9:88:a4:ba:49:f8:8a:
8f:f8:f3:5b:ca:4c:b0:df:26:d9:02:f6:3a:dc:b6:
13:20:4c:91:3c:cf:84:80:41:47:1c:b0:ec:76:56:
fa:73:5b:86:9b:a9:ea:ea:06:5e:92:3d:70:e8:ff:
13:c9:f0:ce:dc:4c:30:df:87:2e:d6:67:61:b4:46:
63:87:1b:68:a2:f4:72:e0:cf:23:3b:38:71:b3:bc:
6f:ce:2d:10:ca:14:dc:55:77:8a:50:ff:b4:05:63:
36:83:40:da:b0:1a:cb:bc:a5:f9:10:69:3a:a5:19:
12:66:86:e1:94:5a:ac:7a:fb:c4:c4:6e:cc:86:46:
c2:67:a9:d3:fc:9d:8c:8d:2c:02:ee:92:d8:ae:02:
50:36:c8:be:63:75:cf:c9:89:62:53:18:84:da:ca:
1a:79:e7:e1:4e:85:29:fd:d5:09:dd:62:64:1b:04:
72:00:2b:03:7a:25:27:5d:c5:7e:ed:96:27:fc:e1:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:BC:9A:D8:63:09:44:71:97:10:AC:36:2F:11:3E:E5:D1:96:DF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:77:c6:50:17:02:79:08:72:55:66:56:18:33:8f:54:47:16:
33:bb:7f:a4:76:45:93:53:17:cb:81:7c:f4:21:92:84:b5:c8:
d6:7e:09:02:94:43:dd:f3:e9:db:f6:14:41:6e:6a:0c:ff:18:
b6:16:7d:b2:2f:fc:e9:79:0a:65:4b:1f:5e:b0:84:6b:bd:08:
f6:a4:5f:13:ce:fc:00:60:8c:47:56:d3:4d:23:ac:1e:8c:0e:
e1:e6:a2:06:b3:a0:c4:94:ce:36:5f:21:f8:e2:2f:2b:97:48:
e9:7a:61:65:91:78:f1:6d:36:a8:66:09:3d:4f:8b:71:08:e9:
46:d2:8a:0d:fd:7c:78:60:7d:08:b6:e4:25:89:20:8b:20:71:
db:cc:dc:21:c0:f3:08:6b:a9:62:ee:27:3d:a6:cd:29:0c:a7:
2b:f6:6a:25:61:8c:ed:30:92:44:60:56:55:00:6c:e1:19:6a:
fc:37:2a:19:35:12:b8:e7:70:0c:34:00:b6:66:25:66:dd:81:
85:6b:8b:e2:0c:fa:c8:b9:3c:a2:5b:ed:76:71:77:02:50:a8:
84:cc:d0:89:f0:e8:ff:fc:d6:8c:dd:e1:18:6a:fb:4f:1c:3d:
fb:a7:53:d0:a2:dd:4d:a4:9b:d2:10:89:9b:7f:71:44:8c:f8:
ec:03:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:03 2025 by rpki-client