Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa
File: 2650d932-359e-462d-a188-11b8c7779af6.roa (raw, json)
Hash identifier: QJdjDYGO1ro/wd8W7g6yp+W2HW1FyvqXRt84ptu60tU=
Subject key identifier: 1B:45:58:B4:08:4D:03:5A:9E:E1:F7:88:D4:63:EC:30:53:D1:D4:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 441905D673C8519BE0C34EB2E2074B7DABDDFD60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa
Signing time: Mon 31 Mar 2025 16:00:53 +0000
ROA not before: Mon 31 Mar 2025 16:00:53 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.73.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:19:05:d6:73:c8:51:9b:e0:c3:4e:b2:e2:07:4b:7d:ab:dd:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 16:00:53 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=3478f5478586630013ad6b7f058db61265e275eccb33200ce137cc40f1667b34, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:e6:01:36:e4:a3:04:5a:c6:86:24:51:eb:
f7:2a:94:4a:85:64:8d:e0:31:95:98:da:c6:07:7c:
ba:98:aa:6f:fc:ae:cc:10:ab:22:29:f5:01:c2:eb:
f4:c8:95:ef:59:35:a2:57:fd:55:69:2f:ab:96:81:
5c:12:ae:5c:12:e6:d4:38:0c:98:2f:cd:66:ae:1d:
67:c9:a3:da:20:c1:98:cd:90:45:9f:5d:24:92:f9:
41:54:55:ae:67:ef:b9:a7:84:6a:ff:ed:62:1e:db:
fc:41:7d:3a:d6:b0:67:c1:01:50:dd:dc:ec:84:63:
eb:60:c9:40:0a:2e:87:9f:2a:4e:29:d1:41:9b:ae:
ac:3f:e6:5b:c1:e3:aa:bb:f8:fd:a1:4e:d4:a4:9e:
5c:13:04:15:4f:23:8e:4d:fb:04:64:a7:92:00:df:
da:91:d8:84:5a:fc:e3:25:15:c2:db:59:ae:d8:4f:
b9:94:0a:2a:6b:6a:63:bb:d1:d6:f6:c7:f9:9c:f3:
ba:72:16:7d:a2:ad:a6:92:15:d6:d6:e7:5e:19:b0:
4f:ec:9b:ee:69:08:f2:67:4e:b2:35:39:9c:8a:be:
88:5e:f5:7c:96:18:c8:19:44:11:9c:84:39:02:6d:
70:f1:b6:69:16:fd:7f:9b:64:fd:a9:b7:1d:ef:54:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:58:B4:08:4D:03:5A:9E:E1:F7:88:D4:63:EC:30:53:D1:D4:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.73.64.0/18
Signature Algorithm: sha256WithRSAEncryption
58:0b:b3:8f:62:66:1e:b5:10:64:07:b7:fd:2d:55:da:cd:af:
43:86:2a:a8:f8:24:4c:2f:2a:13:7d:fe:96:e5:0d:a1:f0:74:
ea:a0:7b:fa:a0:0a:5d:98:63:50:59:cf:1b:74:75:b4:e9:0d:
f8:3c:e7:0d:81:a6:26:bd:d1:21:df:95:06:84:ac:b7:5a:e9:
db:56:d9:82:d5:7b:b1:62:63:30:3f:84:1f:50:46:c9:5a:6b:
8e:84:63:11:c1:4f:b1:cf:38:6a:b6:92:67:e0:b2:17:5b:f5:
37:ce:2e:39:ca:f8:16:5b:7d:69:b6:ab:84:ef:6b:2f:62:49:
1a:9b:99:48:c7:82:92:e9:65:c5:43:20:a4:ed:ba:86:49:ff:
42:74:c4:ab:1a:91:c5:4f:9d:7e:a1:d4:a8:a5:04:44:02:be:
2e:2c:08:8b:2c:aa:bc:68:63:9f:1c:6e:0f:7e:c0:cc:df:24:
4c:0b:e6:55:a2:61:44:13:54:d2:6f:5f:32:69:22:bb:8c:3a:
15:08:70:41:07:31:70:59:a2:e1:90:a0:8a:a3:83:2d:17:d0:
75:1d:70:ef:63:db:f1:46:9a:f4:98:da:2e:29:fa:84:a5:f7:
7d:9e:70:60:37:30:08:41:72:97:16:c1:ba:74:01:1c:03:5d:
47:b1:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:00 2025 by rpki-client on console.sobornost.net