Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
File: f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa (raw, json)
Hash identifier: Fq2SGhDFAsLbtsJ15TL36HQOC17Y/2SHrjXLyr9BR7k=
Subject key identifier: 33:B0:01:88:6C:FB:02:EF:57:A7:6B:4B:45:1F:7A:91:BE:59:1E:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0B384B7D77B8A315F5B29EC3A7AD5952A8731B20
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:4b:7d:77:b8:a3:15:f5:b2:9e:c3:a7:ad:59:52:a8:73:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:c4:ba:f5:cb:9f:b7:7d:f4:48:a8:46:a4:
a6:c3:ec:4c:a8:a0:27:9f:e1:ae:da:67:d4:aa:f8:
b1:1e:88:77:f7:28:51:09:ae:49:48:de:b6:e8:55:
3b:d0:1c:fd:9a:a9:f0:77:c5:ae:33:65:1a:cb:c6:
ad:2a:1e:3b:d7:8d:bf:56:ac:ca:4a:27:dc:a5:28:
d0:0b:b9:fc:70:95:cb:8b:70:99:6b:a2:69:40:c3:
1f:91:98:c3:bf:44:5e:b9:2b:3d:8d:91:43:27:71:
ba:55:8e:82:38:0a:bf:c2:e0:c4:5e:2a:00:41:86:
b7:63:19:b6:98:45:d1:63:3a:8a:06:4f:00:16:82:
cb:d0:65:20:8c:cd:74:09:98:f8:da:ef:39:f5:86:
d6:b5:84:69:a8:e1:1c:d3:dc:63:63:df:20:5e:51:
17:d7:83:72:fa:84:53:b6:48:d7:c6:06:30:91:c7:
da:64:00:c4:51:e3:09:2f:9e:e5:e0:2c:a7:fa:dd:
f1:14:6a:ca:5c:bf:24:19:e0:09:a3:51:10:18:0a:
e2:ff:0d:62:64:43:f7:a6:c8:9f:18:65:ad:62:99:
89:06:c7:b0:fb:41:f6:90:57:53:cd:02:3a:a7:00:
dd:f2:02:94:83:40:27:2b:c7:e5:b1:af:0a:28:8b:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:01:88:6C:FB:02:EF:57:A7:6B:4B:45:1F:7A:91:BE:59:1E:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
78:b7:e7:22:a8:1b:da:38:7f:54:41:24:8f:64:0d:4b:08:2a:
e6:ef:23:c8:9c:2b:40:d6:41:fb:60:ff:dd:4c:95:03:14:6d:
3d:2c:a5:84:09:24:54:8f:64:f6:5a:3f:5a:13:cf:33:53:56:
e8:13:8f:41:dc:77:ad:7f:c6:0a:72:56:5f:eb:d5:2d:a9:46:
94:4a:3e:9b:57:65:86:55:49:61:dd:6e:a3:26:7e:cb:00:f8:
ef:55:d5:3a:56:3e:b9:b7:10:6b:3c:9e:57:ab:8a:7c:5a:b7:
d9:cf:ae:b8:26:85:eb:54:08:ac:5a:36:13:70:b5:38:31:e0:
2e:cf:8b:d2:91:af:55:1f:ce:91:96:8e:5f:71:2d:79:d1:23:
d6:2c:b8:d2:f2:39:65:84:04:1c:dc:b4:57:4c:c2:5d:33:2b:
9c:0a:4e:42:63:89:09:77:21:c3:d1:ba:66:6a:83:02:97:de:
32:3b:1e:1d:80:c3:c1:00:6f:27:2b:cf:f7:47:b3:6d:d2:75:
9c:4c:ac:2f:11:2a:42:82:15:4a:70:b7:58:a8:73:cd:b9:3e:
fc:de:51:c1:b3:86:6c:0d:c0:9b:8d:e1:35:4a:03:4c:98:8b:
cb:30:b9:1c:b8:b8:b2:c0:ca:d4:42:e1:39:41:a8:01:ae:73:
b8:fe:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:36:36 2025 by rpki-client