Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18380f1-6ccd-4170-b605-ff97745298e0.roa
File: e18380f1-6ccd-4170-b605-ff97745298e0.roa (raw, json)
Hash identifier: yjbUrzwlQeNQHQAKPpNdipEI+wBT9r3+EVOCKBN64po=
Subject key identifier: C9:B7:9E:BA:AD:02:77:9C:EB:E8:CF:84:2A:91:53:76:84:0A:08:0D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1EAA18DF9F90D4FA01014F30C14A1AF348CD9E06
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18380f1-6ccd-4170-b605-ff97745298e0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:aa:18:df:9f:90:d4:fa:01:01:4f:30:c1:4a:1a:f3:48:cd:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:ae:d5:35:ca:b5:e0:a5:f7:4b:05:5e:c1:
a6:03:44:dc:b5:28:1d:d0:58:5c:f0:63:78:a6:38:
55:91:4f:ca:ab:71:9c:1e:96:93:ea:0b:d6:c7:dd:
08:a5:d6:cd:eb:90:0a:db:ee:4a:37:48:6c:df:ba:
9a:f4:2e:57:f3:d7:84:87:94:77:bb:f3:c6:8e:27:
2e:cd:ef:c8:ce:2a:47:a6:c3:35:9a:78:12:9e:fd:
8a:3c:04:1d:ee:ef:50:0e:71:7a:48:24:21:9c:22:
91:e9:5d:1c:44:9c:da:26:b7:12:09:60:e2:f7:54:
c3:67:f2:57:76:53:c2:c9:57:69:e6:a3:bc:d5:f0:
c9:b1:d7:45:67:e9:9b:a4:6c:8e:0a:75:ce:6b:86:
49:8d:16:0e:7d:ba:d1:89:c0:74:4e:31:fc:64:14:
b3:e5:95:6e:ca:89:c0:ad:dc:ec:50:28:75:82:eb:
89:98:2a:ee:18:4a:74:5c:f3:14:7a:f4:3b:bc:c6:
f3:56:38:03:95:7a:ea:c3:4e:6e:34:31:25:21:23:
24:80:33:d1:9d:5b:31:b6:00:d5:07:3d:ac:d1:38:
c8:c5:0b:11:a6:46:18:b3:e7:63:57:9a:2a:c9:3c:
f6:96:e1:ea:92:82:3c:cd:04:40:d0:19:a5:1e:55:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:9E:BA:AD:02:77:9C:EB:E8:CF:84:2A:91:53:76:84:0A:08:0D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18380f1-6ccd-4170-b605-ff97745298e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:1f:c4:54:20:a6:f5:b8:c8:9c:80:32:3a:11:ee:1e:91:1f:
43:92:73:60:5a:ba:57:0e:24:70:c4:d6:6a:c1:14:ea:41:b7:
92:eb:2d:41:e3:9a:5c:73:8b:26:35:2f:ab:94:d5:f6:f1:0b:
bb:a1:16:6e:05:37:33:4f:89:70:95:fa:3f:92:50:0b:15:fe:
d8:c2:11:51:20:02:0a:d8:29:64:d7:c2:4b:9c:ff:10:7f:6a:
58:c1:c3:cb:cd:6d:de:0c:99:5d:c6:9c:c4:55:da:63:56:bf:
46:2b:27:d9:82:04:dd:f0:ea:f8:ba:f6:43:1f:e4:2f:8c:bb:
e4:bc:c1:e7:2f:8c:82:cb:ca:bf:6d:77:d4:41:3c:4f:83:fc:
88:50:c0:ab:e5:31:7c:cb:54:15:2c:1b:83:57:d1:cf:5e:d9:
00:af:99:e4:0b:e7:d3:6c:0d:64:97:42:f0:99:ca:f2:30:e7:
bb:f5:c0:e5:08:e5:c3:52:1b:f8:a0:27:ba:a0:a6:69:0b:2a:
e6:04:8e:7e:fc:b2:a3:71:86:b5:02:1e:95:13:01:ff:cc:2c:
aa:74:b9:50:4e:b3:ab:85:e4:8d:13:cb:50:39:09:06:76:d4:
d5:89:51:40:3d:3b:65:b7:69:ad:49:80:33:82:6c:a0:4e:87:
52:17:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:41:19 2025 by rpki-client