Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
File: 0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa (raw, json)
Hash identifier: PWtwpg5WaXGP2iPZorO2+Mr9KqpibHpISvwmHBKruK4=
Subject key identifier: E7:70:7F:1B:E7:00:E9:80:10:55:29:2D:2C:15:3A:A4:33:59:8A:8F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 06C795FC38C6149EBBFFFFC1442D52C0FDA5E264
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
Signing time: Sat 05 Apr 2025 00:20:04 +0000
ROA not before: Sat 05 Apr 2025 00:20:04 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c7:95:fc:38:c6:14:9e:bb:ff:ff:c1:44:2d:52:c0:fd:a5:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 5 00:20:04 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=a0967225fd3cf3032ad0d6381a4e648cd54898dbb5098eb1b032e2e6580a37d9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:af:bf:a5:b6:36:eb:80:50:12:8a:a3:c9:
2d:4f:21:3b:22:78:e2:3f:86:63:e5:d2:f1:2b:cf:
52:2b:fb:2d:17:df:4f:1d:81:87:46:fb:a9:21:c5:
c5:b7:5e:7c:50:c5:d3:9c:19:c9:97:e9:33:3c:5a:
4b:48:9e:8e:b3:37:4c:d3:87:70:85:9b:96:be:d5:
d5:fc:86:72:dc:81:ed:66:8c:d2:16:50:69:cb:c5:
14:28:ee:13:81:4e:dd:e7:b8:38:a5:e6:68:c3:df:
88:59:2a:4e:a2:2c:9b:9e:34:39:b0:db:b2:ee:a6:
52:cd:21:bb:4d:d1:70:0e:76:96:f2:48:e8:bb:66:
bf:de:76:3c:8a:28:da:5c:ee:c8:e8:03:94:ef:b6:
e8:e0:7b:ee:9e:f3:df:6e:52:61:19:12:56:19:b8:
16:d3:22:cd:67:83:87:26:01:6c:f3:bf:e3:6e:b4:
91:38:87:c8:36:dc:72:f8:99:3f:e0:6d:e8:a1:8b:
f3:b3:43:ba:ba:c1:a3:97:42:3b:a5:1c:7f:8e:06:
a9:83:f4:4b:a2:a8:4c:89:53:d3:1f:f7:cf:16:3b:
9a:1a:b6:51:5c:5a:ae:7f:f5:dc:b8:92:e7:90:19:
67:e2:4c:18:81:21:c4:ec:d7:25:ea:2f:25:ca:7e:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:7F:1B:E7:00:E9:80:10:55:29:2D:2C:15:3A:A4:33:59:8A:8F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:a4:00:bc:60:71:6f:07:85:fd:fc:50:00:9c:0a:5b:29:8d:
3f:90:ed:eb:e9:8e:60:66:47:16:95:bb:ec:5f:49:11:99:05:
79:10:39:a9:bf:49:4c:f4:d6:11:8b:d3:05:7b:09:4f:1a:ba:
91:6a:41:2f:e2:5e:1f:f2:f5:26:49:61:b8:8b:9c:54:ab:ad:
87:d5:89:11:5a:87:6e:8b:ac:e3:2d:e3:2a:d8:2b:9b:ce:76:
5e:cc:fb:cf:c1:f4:47:3c:a0:8f:3d:68:21:0c:9c:17:20:91:
e5:2e:6a:5d:ef:e0:81:65:9c:1e:76:38:f4:08:31:90:b1:49:
e8:35:2d:bd:ac:07:c5:d9:d2:2b:99:69:ef:4d:2b:c6:bd:49:
88:67:26:4c:e8:d6:fc:6a:1d:13:e9:a8:01:6d:cb:4f:41:42:
bf:47:3f:ef:36:19:3e:4a:c7:77:87:1b:df:af:16:a7:ee:42:
e6:52:14:e5:5b:e0:53:9d:14:b6:ed:b1:7b:a6:36:ac:1c:3a:
01:25:d1:8d:1e:fb:b3:56:fc:3e:c1:6b:6d:9b:df:72:10:ce:
f4:5a:4c:3d:0d:12:26:e1:ae:b6:81:40:02:f3:59:6f:2a:78:
40:bb:6a:2d:d6:f0:f2:e0:84:f3:02:3a:50:76:ab:26:f4:3a:
11:eb:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net