Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
File: f0b62efe-867d-4733-9b0c-8354a04195f8.roa (raw, json)
Hash identifier: Yn0L930us0a1daBvLE1VvDxBQBz8Zgi4p98pVxz23E8=
Subject key identifier: 05:E2:3D:BB:9D:C0:3A:D0:B3:69:13:EF:BB:84:1B:85:82:7E:9B:B9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 55161CDBE471772B866AB1DFE4A61137EE7C1FE1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
Signing time: Wed 05 Mar 2025 17:50:12 +0000
ROA not before: Wed 05 Mar 2025 17:50:12 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:16:1c:db:e4:71:77:2b:86:6a:b1:df:e4:a6:11:37:ee:7c:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:50:12 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:a4:d5:c7:2f:8c:60:4f:2e:80:e9:f3:16:
bc:3a:5c:fd:27:13:6e:ca:2d:26:f6:32:70:a9:67:
74:9c:1b:92:a0:3c:91:87:9b:3c:d2:2b:6a:da:57:
3e:f0:bc:6e:e1:f5:ba:f2:31:9c:e3:cb:d6:79:e8:
2a:65:e0:c4:4a:4c:32:be:09:65:9e:a3:af:f4:e5:
ae:66:02:fc:50:bd:dd:92:1f:11:0c:b7:e8:cf:4d:
2d:d9:75:68:04:30:c5:b4:f0:7e:57:3a:26:d6:2a:
cc:fd:e3:ff:1c:3f:d3:02:5b:94:2d:08:0c:0a:f4:
d3:af:78:33:53:ac:77:96:ad:be:af:c4:f6:1e:87:
69:a4:9f:3e:4a:5e:cc:de:a0:b2:8f:3d:5e:c3:02:
49:4c:53:b8:d5:25:73:3c:66:8d:8b:b4:38:09:a5:
03:0f:29:ba:c8:58:a9:19:2c:38:c3:b3:2e:2c:7c:
44:d9:61:49:96:a2:b6:ac:57:04:85:e6:4d:23:df:
32:f9:eb:fa:b5:42:cf:8a:d5:5a:3d:66:63:63:79:
76:b8:94:b6:c3:82:1f:b1:8a:de:c0:62:02:bc:43:
3e:97:8c:9c:02:14:b5:d5:83:f6:af:a8:82:42:2a:
05:58:9b:56:6a:28:03:f5:49:32:3f:36:c7:f1:27:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:3D:BB:9D:C0:3A:D0:B3:69:13:EF:BB:84:1B:85:82:7E:9B:B9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:78:19:56:8f:a7:9a:5d:f5:f5:6a:e4:d8:15:66:6d:aa:c9:
ae:27:5f:e8:69:21:32:76:1b:c2:39:6d:4d:1c:e1:28:12:f2:
a6:9d:0e:cc:fb:b2:60:47:0f:d0:d1:87:c0:b8:9c:b3:c5:6e:
63:75:60:96:ce:2f:d6:ef:a5:1b:18:17:89:16:dc:4f:39:20:
35:1c:4f:d4:3f:18:ad:e8:87:01:8c:f6:13:1a:b4:33:3f:9f:
d2:f2:44:49:e4:27:40:27:9f:1d:f2:57:fd:51:80:4c:e2:64:
26:17:e6:86:ce:31:ae:f9:a3:cd:b0:e5:32:bd:ee:0b:b5:dd:
07:0d:f7:22:97:9c:bd:bc:5c:e8:9e:b5:39:f1:f5:12:2e:31:
86:0c:ce:29:be:68:ca:70:6b:15:a0:a9:6b:04:fa:a2:e3:29:
8f:b1:bb:f8:0e:10:d3:00:3f:68:eb:69:e7:5b:41:24:2b:f0:
20:b9:1e:73:3b:b0:d1:31:af:64:56:c8:f7:04:da:b2:3e:41:
ef:08:75:1d:a2:39:24:26:e2:5c:82:99:c3:65:1d:be:e1:b2:
52:0d:00:17:47:14:ca:46:2b:b3:32:ce:cd:02:f1:dd:0d:62:
96:5a:df:05:8d:25:bd:d8:1a:86:ec:72:84:e1:79:71:05:26:
4f:18:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:06 2025 by rpki-client