Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09fd926-3f61-4391-9843-738e03da5e6a.roa
File: f09fd926-3f61-4391-9843-738e03da5e6a.roa (raw, json)
Hash identifier: ShEYDo5teXkwgwgED9Ls81xzMxjIoW06G56EElWWYPY=
Subject key identifier: 96:C6:A4:A6:54:F9:B1:81:E8:C1:3C:7A:EE:17:CD:CC:E0:CB:97:4D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6371BA67E8A377B165C0F4F86042BA8A6310E8BC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09fd926-3f61-4391-9843-738e03da5e6a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 200.197.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:71:ba:67:e8:a3:77:b1:65:c0:f4:f8:60:42:ba:8a:63:10:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:91:cd:29:7e:ee:f0:47:02:30:67:65:e6:
c2:ba:0d:b2:a0:12:2f:97:01:63:c4:85:a5:05:c5:
dc:86:1f:dd:e2:b1:b4:f0:ab:f0:0e:44:1a:c5:75:
12:c6:56:75:5e:d8:8b:38:de:47:76:11:2a:bb:3b:
f1:8d:75:7c:51:cc:07:44:2a:8f:28:23:be:cc:d3:
ca:77:cd:67:b7:2b:18:7e:03:52:77:4b:02:a1:86:
81:d3:f4:52:a6:bf:c0:ab:48:5a:c7:bd:48:9c:b0:
8c:cf:82:36:18:33:57:08:48:98:f1:6d:10:a8:0e:
0c:f3:71:52:e4:d5:b9:3e:18:d3:8c:b2:70:11:38:
b8:3a:2e:2e:7e:49:53:0c:6f:92:dc:e7:78:7c:34:
2f:f5:76:84:e0:0b:ea:9e:92:62:c5:50:a7:54:8f:
12:d2:f7:48:dd:f9:53:b8:7b:88:42:a7:0f:96:a9:
5d:67:2b:8c:25:31:dc:4d:aa:84:85:ff:a8:66:63:
70:26:59:df:71:e2:68:23:96:92:fe:8e:da:cc:87:
5e:c3:94:7b:79:2c:04:55:5a:3d:58:27:af:81:2c:
21:8b:08:be:04:ed:dc:48:dc:72:82:c7:e8:c6:3b:
12:f3:f5:ae:f9:d5:f2:1c:53:fc:ca:d6:42:0a:64:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:A4:A6:54:F9:B1:81:E8:C1:3C:7A:EE:17:CD:CC:E0:CB:97:4D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09fd926-3f61-4391-9843-738e03da5e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:d6:50:7f:db:d7:6e:04:14:66:ba:55:85:39:09:34:c2:c0:
b6:8e:e3:1d:27:56:24:b9:d4:3d:9c:72:b2:7d:63:1d:5b:76:
20:cb:7c:2a:74:36:0f:1a:c4:f0:82:4d:25:30:21:d7:74:6b:
a0:17:fb:df:de:5c:34:ee:69:93:4a:30:25:9a:b8:7c:48:9e:
d2:9c:70:ba:16:5a:b0:f4:f0:6e:b7:ee:b5:d6:6f:57:4f:9a:
43:9d:81:f3:fd:d6:10:f3:15:bc:50:32:80:2e:2e:24:9c:15:
9e:58:6d:2c:60:c7:45:3f:ff:41:88:93:45:b8:e3:0e:7c:0a:
3a:78:ab:46:ae:27:6b:e2:07:27:65:11:71:d0:ad:f1:71:41:
f1:b6:9f:fa:bd:b4:6f:40:a5:dc:12:03:4b:fe:58:64:04:4c:
02:75:1c:5f:9d:bf:9d:92:8c:cf:b4:86:89:90:a3:a6:fa:3a:
92:e3:f3:ae:cc:e1:66:99:f7:00:f1:b1:ed:e7:6a:f6:0e:a5:
18:97:f4:0e:aa:a1:89:87:b8:e9:60:96:fd:22:06:b1:ff:bf:
07:03:cd:ab:83:e4:b1:df:25:da:e3:40:9b:30:ba:82:a6:ac:
87:e3:d4:4c:e4:e9:d8:37:40:20:dd:c9:88:ed:29:86:62:91:
ca:8d:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:36:09 2025 by rpki-client