Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
File: 3558ad32-215e-47a4-9f5b-477ec71e940f.roa (raw, json)
Hash identifier: AtwGZck/z4ilbXMyaBJTsof8A7TEWR92m16XZQpSxIo=
Subject key identifier: BA:42:38:F1:F6:00:1D:39:CC:55:D3:6C:9C:02:89:AC:FA:5F:4E:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 99A3DFD568ABB50AC062050C50470FE716DC62
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
Signing time: Mon 31 Mar 2025 21:30:15 +0000
ROA not before: Mon 31 Mar 2025 21:30:15 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
99:a3:df:d5:68:ab:b5:0a:c0:62:05:0c:50:47:0f:e7:16:dc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:15 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=7c9995b5abf55685c00c86fae07a9aab348003c26df1ee5f7dccbc890c0f76cf, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:56:c4:e2:5e:f5:1e:1a:fa:03:19:22:54:
69:33:70:b5:a1:cd:d6:41:b2:bb:b5:04:c7:4b:63:
a2:aa:d5:8b:cf:0a:5b:71:76:3f:2b:c3:1d:00:52:
7d:42:9a:69:da:3b:50:9a:29:5f:ad:5e:53:39:95:
ab:f2:29:e0:44:cb:20:5c:4b:a9:84:00:3c:db:b0:
24:14:f2:ba:c0:49:9e:b1:1c:29:eb:27:61:0e:78:
ce:ae:6d:db:71:15:ee:9c:86:de:07:d1:bd:ee:d3:
c2:58:8c:64:37:92:ac:a1:a8:22:51:7e:70:9a:ea:
f1:f4:6e:e3:48:3b:02:76:44:64:ca:3c:2d:6f:1d:
7b:e6:34:2b:90:0f:0c:b8:4e:05:ce:4a:7f:1c:c2:
43:a0:03:b0:87:de:ca:9b:8b:ca:46:0d:56:1f:12:
1f:82:27:27:0d:31:11:60:e5:3a:36:f6:c1:a9:0f:
97:07:de:d4:00:26:18:9b:bb:fb:96:70:64:11:5d:
48:36:02:8c:50:f9:f9:86:af:97:5a:ac:5f:cf:77:
f8:fa:3c:da:2f:90:81:30:1e:7d:1d:c6:ef:84:48:
e0:9b:de:0f:16:c0:de:bd:07:3d:e0:77:3a:1c:cb:
40:f7:1e:a3:3d:3f:fa:a8:d6:31:17:07:bb:40:57:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:38:F1:F6:00:1D:39:CC:55:D3:6C:9C:02:89:AC:FA:5F:4E:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:3::/48
Signature Algorithm: sha256WithRSAEncryption
83:c2:15:1a:ab:9e:f7:c8:0c:13:3a:74:43:92:16:07:d7:a3:
66:bc:13:21:4f:76:90:78:7b:66:19:57:cb:bc:dd:79:e2:b6:
ed:e3:98:ac:50:5a:b1:83:8c:bb:12:d4:c7:63:f1:0d:09:22:
8b:2c:a3:df:96:29:79:f1:f3:f5:93:4b:b9:4d:b3:eb:fa:fd:
8e:54:b5:a0:0c:d9:0c:d9:75:a4:81:02:25:bd:5b:11:85:be:
2a:49:ad:d4:5c:58:8a:61:f6:f8:92:bf:30:c7:b3:89:c5:eb:
5d:3d:34:1b:30:9a:d3:e2:13:e8:cc:38:08:b2:d2:26:e8:cc:
96:07:37:9c:a0:f8:75:c3:68:28:3a:ca:e6:4c:92:e4:38:94:
05:1b:0e:52:4d:97:3f:e0:63:24:34:dd:cb:d9:8c:ba:6c:91:
19:eb:b4:87:84:8f:f4:38:5a:d9:ba:b1:47:3d:58:ce:4f:26:
5e:e7:5c:d3:42:7f:b3:33:94:3a:14:0a:25:de:9d:5e:71:35:
8a:5e:29:56:5a:a9:8c:42:c6:a7:bf:88:3d:48:01:8f:30:9b:
39:96:dd:e3:28:1f:36:00:a3:cd:46:01:a0:65:af:7f:15:d1:
35:28:38:11:d9:02:79:47:39:6d:c2:13:90:d7:29:c7:7a:33:
d4:c8:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net