Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
File: 383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa (raw, json)
Hash identifier: ncRa0e+pzFOKOJyJKp/ynqBsRhJL4JyeXdRTlYef4qs=
Subject key identifier: 19:1D:E6:D9:DD:BB:AA:1A:00:A9:44:9A:60:64:D8:4B:AC:CF:52:8A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12B2A6C5646AF6D67139CF594A3F138D73BF0735
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
Signing time: Mon 31 Mar 2025 21:30:11 +0000
ROA not before: Mon 31 Mar 2025 21:30:11 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 200.224.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b2:a6:c5:64:6a:f6:d6:71:39:cf:59:4a:3f:13:8d:73:bf:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:11 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=1bcac7e8f794565887a7a99c36a7c6632f332d161e25db1e227cc638016ae80b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:2d:57:1d:88:1d:c1:74:8a:a3:75:12:46:
9d:22:80:ec:a3:8e:a0:8d:c1:1e:dc:44:5d:95:01:
3d:1d:ef:e4:0f:8b:32:af:bb:8d:22:4c:68:21:0e:
93:97:fa:89:b4:69:5d:f0:bb:7f:ea:f8:a4:96:f8:
14:b4:39:ab:9c:10:2e:02:cc:a0:0d:ba:3b:63:46:
b3:2d:d9:b3:fa:65:3e:ad:29:2c:14:89:8a:ba:41:
e4:9f:c3:40:53:24:4d:67:91:0d:29:bf:55:76:95:
b5:3b:72:3e:5a:5d:46:d0:6d:7b:bd:3b:d0:61:e1:
92:40:8f:d0:9e:9c:e8:73:47:b9:1f:14:47:32:ba:
e1:55:84:35:06:f9:3d:cd:7e:53:94:f7:d4:f8:ca:
1c:5a:b2:f1:fe:46:24:01:a5:cf:c4:46:ff:35:4d:
5f:1d:a4:f8:4c:43:9a:4d:54:2d:47:55:37:1b:b0:
ba:da:16:61:e2:a5:18:6d:63:de:2d:8a:d1:4a:22:
ed:4b:2e:40:88:cb:9a:d5:ac:fe:ce:28:35:f0:b3:
6f:b5:09:98:06:e1:a3:2e:ae:de:eb:c9:ed:81:c0:
e9:80:01:14:31:f2:1e:5d:58:08:43:61:af:5b:b7:
03:2d:51:52:6f:78:7b:07:39:71:8b:4d:b5:1e:8e:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:E6:D9:DD:BB:AA:1A:00:A9:44:9A:60:64:D8:4B:AC:CF:52:8A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:9a:67:da:2d:3d:1b:0e:29:f6:90:24:44:e7:47:26:4b:c8:
f4:c3:fe:64:0b:6e:be:66:e0:55:bc:88:e6:9f:86:68:7f:db:
f3:53:52:d6:75:05:2e:d7:d7:0d:46:f2:bb:01:a7:84:e3:fd:
b8:8f:c5:45:22:eb:a0:04:d2:51:33:ef:01:30:d6:4f:4b:03:
33:8c:0d:59:9b:bf:26:b9:1c:87:cf:34:cc:3d:a2:5d:19:3e:
54:ee:2e:59:43:10:ed:f2:85:e3:d7:cf:a4:86:b2:c7:74:71:
0b:d5:32:a4:ba:17:7a:8a:ca:41:34:26:54:f5:20:df:4e:db:
5c:d4:10:ee:08:00:bc:ac:d2:ec:94:04:24:73:ce:2e:f8:41:
7b:34:e2:f9:47:9b:4d:12:ce:9e:76:31:76:7d:30:66:51:09:
74:8b:d5:bd:50:8e:7b:77:b9:03:d4:c3:4f:1e:5e:ac:30:69:
95:50:0d:7f:e5:17:e7:12:0d:15:9d:e2:40:1a:a0:42:7e:74:
e8:10:31:07:97:de:1e:9b:ca:46:d4:c8:f5:e5:ef:d8:89:e1:
24:aa:a1:4a:e2:20:f8:ae:8b:dd:94:00:ac:75:6a:35:5f:cf:
62:72:1d:ed:b3:c7:e4:65:72:18:bf:db:09:9c:a5:08:92:10:
48:ef:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net