Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
File: 207ef309-dcb5-4264-bf57-0d52fea079cd.roa (raw, json)
Hash identifier: 49Agp6a46WbL0R/sjYKz0hSFJo1wVrpYZQEEQZG6oww=
Subject key identifier: 22:EF:9A:E1:28:6D:2B:D3:D7:F6:31:86:34:85:00:1E:2E:13:5A:59
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48A69027D3231523332DB2670FEF77986B3E1EB1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
Signing time: Fri 11 Apr 2025 00:50:02 +0000
ROA not before: Fri 11 Apr 2025 00:50:02 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a6:90:27:d3:23:15:23:33:2d:b2:67:0f:ef:77:98:6b:3e:1e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:02 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=2cf728992936d29eecb31d537413698d9b691e2cb2011637dd52754114452a5c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:63:38:5f:61:58:25:bb:5f:a5:13:f0:4e:
2f:b5:e5:39:33:2b:4d:31:7f:eb:c8:91:93:d8:e7:
81:a8:90:6f:57:4c:ba:60:d9:eb:84:9f:53:93:37:
9f:b3:3a:27:60:2a:65:64:27:a9:db:2d:4a:aa:6f:
8e:eb:88:5c:d7:0c:e4:26:c5:43:6a:85:b9:03:41:
e5:f7:2b:a3:55:8b:dd:c0:47:9b:38:1c:6a:da:25:
55:47:1d:8c:34:11:72:28:d4:ae:48:d6:7e:4e:1e:
d2:43:77:9e:30:03:43:82:0f:c0:ef:c8:03:38:6f:
22:b3:e6:47:84:86:e2:d2:0e:d4:ba:ae:78:d9:0d:
23:2f:9e:ef:53:df:92:b9:56:fc:ae:b8:4e:27:b7:
98:19:b0:c2:b1:d5:f1:5a:65:40:1e:27:ea:70:0c:
2e:18:d9:1e:47:97:fd:45:64:4c:be:b1:07:af:40:
d9:9f:ea:8c:18:d1:3e:e4:0c:06:d8:59:0e:b9:8f:
6f:ee:86:13:6e:69:2d:c5:5a:4a:ad:7d:1c:5e:c4:
1e:5b:92:19:48:97:20:4b:17:99:a3:8a:c7:9f:7d:
c1:b2:d6:ac:38:de:e5:f7:fa:09:54:9b:1e:f7:76:
5f:8c:a6:61:d1:17:34:0f:19:69:0b:68:52:0b:fe:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EF:9A:E1:28:6D:2B:D3:D7:F6:31:86:34:85:00:1E:2E:13:5A:59
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:b6:10:58:0b:e2:df:39:d4:b1:c1:89:1e:51:16:85:a2:1e:
c4:ba:c5:41:6c:5c:45:a5:b5:74:0b:06:df:a4:e8:6b:7f:42:
7c:3a:9f:e1:47:e4:a6:e5:d9:de:8f:32:51:97:71:d5:78:2e:
34:37:4a:3c:3d:66:c7:1e:d5:9a:b5:21:60:b4:36:a5:9b:fe:
23:7b:d1:ed:a4:ec:d7:20:7f:71:3f:c8:6d:53:3a:cd:4d:bc:
3d:bc:bd:2a:e8:45:8d:7e:5b:71:fb:15:b7:b5:15:9e:32:83:
52:0f:b6:7d:80:ca:92:06:1e:0b:f4:09:d7:61:99:57:52:25:
c6:80:bc:c8:78:85:82:82:d1:18:6a:f6:06:17:73:91:45:c8:
43:e8:7e:3d:86:2a:21:4c:15:12:92:18:c1:f4:85:d7:93:9d:
2d:9a:13:ca:73:77:56:ed:bc:73:0f:6f:d8:66:ea:40:c9:90:
ae:f9:97:55:b8:44:59:c6:2b:59:04:47:77:86:48:68:2a:3a:
0f:1f:7e:b3:23:5e:73:ff:a5:d6:0b:b5:73:b1:7d:f2:9a:02:
6f:79:3a:6f:9f:c3:d1:4f:e5:bc:e1:90:2a:fe:b4:e4:ec:30:
82:e7:c1:73:ec:01:7e:60:ff:4d:20:46:80:e1:31:65:8c:16:
75:c0:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net