Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
File: 286f881c-8fa0-4200-ada2-20a0cc49038e.roa (raw, json)
Hash identifier: fRPp7LrMXsxfCuh32c3MIYw1DO+fUnknTuQmcsrEq0w=
Subject key identifier: CA:94:00:B7:B6:97:37:5F:EB:90:E8:6D:E0:65:65:C7:E2:57:2C:6B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 567F7B918241E2758895E53787E91E53916A7602
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
Signing time: Mon 31 Mar 2025 21:30:40 +0000
ROA not before: Mon 31 Mar 2025 21:30:40 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7f:7b:91:82:41:e2:75:88:95:e5:37:87:e9:1e:53:91:6a:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:40 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=133ffaf7cbaff59ad4d07d1b1b06783335bd42976eded8e9d73f08743cfa41d5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:a5:7c:f9:3b:0f:a0:25:33:26:03:0b:2a:
27:e0:a5:f1:7a:b1:45:50:f8:ac:f1:54:8f:e2:e0:
ff:9b:18:5d:90:e9:f5:73:50:5a:8f:59:4a:4c:69:
88:68:7d:1d:0e:ed:d2:21:f1:08:31:35:50:15:99:
32:01:6c:fc:c3:e0:71:68:88:48:9a:fc:05:fb:ea:
c9:9b:2e:b5:fe:e8:c0:27:23:36:5d:02:31:89:8a:
aa:a4:4b:58:f6:6e:93:e0:08:63:bc:d1:34:86:08:
4f:fa:da:56:58:d3:4f:d0:43:61:37:c7:76:bc:f4:
11:94:4f:e4:35:06:5f:34:13:81:76:8f:80:3d:d0:
dc:17:bb:00:73:1e:21:e7:82:6a:82:37:e3:3c:8f:
3a:d7:51:85:e8:09:eb:ae:63:ac:f5:4f:58:be:19:
26:f9:a0:93:0c:12:77:30:26:7d:49:25:d2:a8:db:
34:9a:9c:b9:1a:e9:de:79:db:11:7b:0d:e2:00:a5:
84:ec:ad:ce:a7:d2:9e:59:f8:73:b7:aa:f2:3c:9f:
7d:12:39:a7:f3:dc:83:1c:99:65:9b:11:01:78:be:
e8:a6:66:a9:50:49:bb:12:23:66:37:a1:56:d6:7e:
a5:3d:74:6f:65:2f:8f:68:c4:37:34:18:90:7f:44:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:94:00:B7:B6:97:37:5F:EB:90:E8:6D:E0:65:65:C7:E2:57:2C:6B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ba:28:bc:a5:fa:5b:ce:7a:5d:86:90:98:dc:51:b5:4d:07:62:
85:f6:3c:ce:a1:52:40:a0:7d:62:f5:5f:c6:6b:33:e6:ea:73:
03:69:40:71:b8:bb:fc:6d:18:7e:82:88:3e:a4:14:c4:80:3c:
be:aa:95:03:94:98:fe:b1:62:fc:b5:7d:20:ac:d5:67:39:a6:
06:65:25:da:6f:65:e9:f9:30:0d:44:41:8e:6d:97:52:f0:6c:
6b:19:3c:1c:f0:0e:1c:99:d2:cd:41:71:94:35:d9:01:12:61:
e5:98:b5:a7:30:9e:2b:62:99:4b:76:97:fb:20:c0:d0:ee:96:
64:d9:ed:ff:fb:f4:77:43:90:52:d2:ec:de:c1:e3:b9:ee:11:
50:23:74:0d:58:8b:4e:04:be:b5:ac:25:e0:34:ee:bb:dc:fc:
d2:d7:7e:91:73:59:19:fd:54:05:96:26:55:48:83:b5:18:f0:
16:d7:66:d2:77:08:86:42:ac:45:cd:c5:5b:e0:4b:1a:a9:a7:
ad:19:16:43:65:12:c3:d5:ed:0b:38:2e:b3:3e:74:73:2f:67:
67:ae:ca:f7:b8:05:ff:e2:97:0e:6a:20:c5:6f:02:b2:30:e0:
a6:77:0b:50:4a:4a:bc:63:6c:99:c7:8d:41:bd:b1:d9:cf:d8:
e6:c0:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net