Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json)
Hash identifier: 9GIsBWk7m5op2F+fNqJbipeCzTiyfiNxuFqyT2ALQM4=
Subject key identifier: F2:98:E8:A8:06:0B:A7:18:9A:9C:EB:04:6D:25:44:25:F0:17:C8:9C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7BB88654874399AA1C3C4CD7EBD3F459F0D32B2C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
Signing time: Tue 01 Apr 2025 15:11:21 +0000
ROA not before: Tue 01 Apr 2025 15:11:21 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.94.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b8:86:54:87:43:99:aa:1c:3c:4c:d7:eb:d3:f4:59:f0:d3:2b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:21 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=68ba36ee23624921ad2e8adabc6fdcaf118960e28aa15d9874feadd1f8798c54, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:c4:cb:42:94:94:cb:1c:d0:01:0d:f3:a4:
a9:0c:27:2f:23:00:9d:3a:1e:88:1a:55:8f:af:51:
ee:d7:ed:97:af:c0:ba:d5:19:fe:f5:ed:de:f8:60:
93:24:89:d9:ad:3c:26:4c:a3:31:5c:3f:87:06:6f:
78:60:e9:aa:21:98:b7:18:81:82:9c:85:13:cc:73:
15:7b:6a:38:37:f8:57:05:2d:1e:ee:37:50:0f:bd:
df:3d:5d:b9:a3:58:cf:bb:2b:7c:d5:b8:3c:0b:20:
65:67:0e:6e:2b:a1:a7:be:56:50:1c:51:5c:c7:17:
d0:c8:84:60:f4:20:09:fc:d5:13:f6:6c:8d:1a:33:
04:9a:4d:9a:74:f4:f4:40:c1:71:df:c4:63:c6:24:
e4:13:50:8e:c0:88:99:37:74:eb:5a:fe:f4:9a:51:
9c:db:a4:7b:5a:0d:6c:9c:66:9c:ab:8e:cf:24:54:
0f:ec:90:d7:f6:f3:79:fa:1e:31:64:de:b4:3e:29:
ef:40:84:c2:7d:ea:d2:87:0c:77:2e:8c:92:08:7c:
4f:3f:cb:43:9c:03:06:b8:ed:c8:87:00:50:87:48:
8f:26:7e:e3:0a:a6:9c:4f:d1:62:62:59:0e:3f:45:
f2:c7:24:23:cc:a7:16:bf:d5:b6:75:7e:63:4b:14:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:E8:A8:06:0B:A7:18:9A:9C:EB:04:6D:25:44:25:F0:17:C8:9C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.94.0.0/15
Signature Algorithm: sha256WithRSAEncryption
55:28:ae:2e:7c:bb:fd:89:b9:56:2a:9c:db:3d:9d:96:c6:21:
ea:11:cf:aa:cc:d8:05:78:64:69:ab:8f:f1:17:48:6a:31:7e:
e6:d9:2a:62:ee:db:05:b3:1a:11:5d:a6:99:1d:65:79:93:38:
a0:c2:6c:8b:7a:28:79:f2:f6:53:cf:c0:a4:6c:cb:39:4c:d9:
9c:c0:92:96:f5:4e:f7:fa:45:13:aa:12:91:bd:81:d9:51:e5:
02:56:93:1d:6c:42:1f:95:2d:ca:35:ad:57:4e:57:18:53:e9:
70:59:e6:ae:db:3e:93:d7:64:7b:7a:8e:53:47:3d:d6:74:35:
87:7a:bb:b3:82:9a:c3:c4:3b:00:83:bb:99:95:94:47:51:c6:
eb:82:a2:f4:93:54:20:c1:2f:e5:2c:c6:13:55:46:fe:47:bf:
3f:90:ec:74:06:77:d5:9e:8b:b2:78:54:5f:08:1b:ea:98:f1:
e9:5f:ae:89:c8:c2:40:6a:3e:57:5e:7c:05:fe:d2:07:56:e3:
52:be:90:d5:45:d2:11:9e:67:cf:c8:d8:bc:2c:0d:9d:a9:24:
32:33:31:b4:89:46:fb:15:ca:01:69:4a:e1:12:93:59:2b:73:
71:42:ea:ff:94:d6:da:7e:44:a0:47:09:50:a6:d5:7b:c2:48:
83:1c:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net