Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
File: d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa (raw, json)
Hash identifier: 8D7wpunErKRFcPlFiEg6L+M30o+pXE9EilNLj8LHHmw=
Subject key identifier: 3E:5C:DB:5F:C4:6C:FB:18:69:AD:1A:3C:85:90:DE:77:00:1A:25:2D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1C9769791D7F5F1B5DDC774007BE05C9AD423DAD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
Signing time: Wed 05 Mar 2025 17:50:18 +0000
ROA not before: Wed 05 Mar 2025 17:50:18 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:97:69:79:1d:7f:5f:1b:5d:dc:77:40:07:be:05:c9:ad:42:3d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:50:18 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:34:48:15:10:db:a3:06:e6:3f:9c:d6:5d:
4e:9c:ff:19:15:cf:46:6c:d0:8c:6a:62:3d:f6:67:
93:52:42:8c:ba:d5:ca:d4:ef:e8:a6:d4:8f:46:53:
0f:86:c2:c6:b5:0b:f7:d8:92:6e:00:36:74:94:ec:
7f:db:cd:a7:ba:fa:8a:90:3c:49:33:36:9a:db:c8:
0e:90:01:7f:01:56:b7:19:43:f9:ef:4d:c6:47:25:
ce:de:8b:97:25:9a:19:f2:eb:b2:e2:8a:25:3d:d4:
a4:6e:6f:7f:91:e5:4e:be:0c:b1:74:3f:6d:1f:ff:
41:16:06:fb:32:6d:73:84:8b:63:38:e6:40:f4:75:
1f:76:92:30:7e:f5:56:49:43:c3:51:9e:b3:dd:7d:
62:5b:41:1b:78:59:ff:ce:34:c2:52:d0:5d:49:c0:
3f:13:5d:39:6e:4c:4a:8e:79:d2:06:93:68:6f:36:
61:bd:1e:f9:ba:b7:65:f4:32:17:ab:f6:8b:cc:ec:
65:5f:be:a3:06:01:81:cf:0d:a0:c3:9f:04:6a:69:
46:0e:d8:66:c3:95:cb:7f:f4:11:e3:e9:4c:cd:a3:
94:80:eb:14:16:91:9e:17:cf:a1:f7:90:3e:31:40:
61:80:89:ba:f8:5a:48:f3:3f:3f:c5:b5:c9:00:65:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5C:DB:5F:C4:6C:FB:18:69:AD:1A:3C:85:90:DE:77:00:1A:25:2D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d1:00:28:bc:33:01:58:d3:0c:a3:8e:30:83:5c:91:38:b0:f0:
ac:8b:7e:a0:4f:f2:91:73:1e:ee:0b:72:0e:db:af:d1:76:a0:
3d:0a:dc:9e:04:ba:16:94:78:51:47:91:8c:f0:14:78:89:4c:
f7:0b:b4:dc:08:97:36:6a:44:0e:4c:8a:63:0f:59:fe:74:e2:
fa:68:85:81:d1:a9:a6:83:1f:7e:7b:44:a7:c2:17:c9:60:f2:
ea:24:15:60:be:5e:12:4d:f9:0e:b5:e4:58:be:b0:e4:a3:ed:
a2:c9:37:7b:d8:2b:ce:39:93:41:6c:1f:e5:0f:5f:5f:72:e9:
08:cd:7f:cc:27:46:e1:e1:1f:95:2a:4b:14:9f:db:bb:a7:5c:
c2:ed:a7:64:ee:3b:f8:6e:05:54:43:24:02:f6:7f:24:dd:ff:
12:67:84:72:52:e4:de:9f:93:44:8e:ea:92:8e:23:3d:78:4c:
5d:7c:5a:50:33:06:03:2b:34:5c:36:05:f3:c7:cc:d9:76:09:
05:7e:36:cb:3b:76:8d:0b:dd:91:91:a7:73:53:74:ee:92:b7:
9d:d6:97:34:7b:fc:63:12:ce:20:0d:d4:4d:1c:fe:3b:b6:19:
85:57:92:5b:97:65:7f:6c:7c:95:ea:28:1c:69:f5:4c:17:df:
8b:28:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:29 2025 by rpki-client