Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/39032a05-08aa-42f2-98fc-8aa6aeee1dc2.roa
File: 39032a05-08aa-42f2-98fc-8aa6aeee1dc2.roa (raw, json)
Hash identifier: FiTc/eiyeZ58+UjEU4qr/ACIUvUp8q+e4mjO6Cfhu90=
Subject key identifier: BC:DA:99:78:5F:CC:69:FE:DD:F6:2D:24:C1:80:98:8D:63:78:31:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49F96B9BB0453535F3FBE1D97D69D854C4C1E68C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/39032a05-08aa-42f2-98fc-8aa6aeee1dc2.roa
Signing time: Tue 01 Apr 2025 15:10:22 +0000
ROA not before: Tue 01 Apr 2025 15:10:22 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f9:6b:9b:b0:45:35:35:f3:fb:e1:d9:7d:69:d8:54:c4:c1:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:22 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=18eaa17bfd2420c2ca6b17b49c6e018fd6879dc623fde767de9ec68a108121c4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:20:ef:03:0c:2e:93:13:a6:92:cf:d1:a3:
5f:e3:ec:38:24:c4:16:39:d6:17:f0:d6:8d:07:01:
39:6b:2a:ca:6f:1c:50:ac:d2:28:27:5f:39:93:04:
cb:71:10:64:8a:05:4e:a0:5a:e3:29:6c:11:53:1a:
0d:f9:bb:d4:38:d8:eb:82:8c:a5:ce:48:ce:22:0a:
f0:2e:93:ec:a8:50:a4:84:f2:64:e3:a1:68:bd:60:
59:6e:03:0d:91:ba:3c:7e:fb:c0:18:73:29:a9:51:
8e:02:98:be:20:4e:4c:58:39:31:df:29:36:f8:52:
45:b6:9e:88:57:a4:9c:aa:e0:09:e7:68:e1:0c:d1:
c9:9b:ad:b0:2b:5c:ce:2f:82:56:3f:0f:6f:69:2b:
51:75:8f:93:bc:e5:60:f9:40:5d:a2:b1:8a:95:93:
91:72:90:b3:60:44:c7:43:b9:ce:8c:2f:63:69:3c:
bd:06:81:6a:5d:ef:ea:f1:3b:42:29:cd:c5:0c:07:
e9:48:ed:79:22:91:8f:30:17:c3:77:d1:83:ad:16:
76:11:32:31:74:3b:2b:64:0e:0c:4e:63:1e:48:41:
c6:a7:ca:ff:f1:21:c8:4a:72:16:03:64:23:11:68:
7f:e0:4c:10:1f:84:9e:f5:d4:e8:f3:b8:51:56:78:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:99:78:5F:CC:69:FE:DD:F6:2D:24:C1:80:98:8D:63:78:31:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/39032a05-08aa-42f2-98fc-8aa6aeee1dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.80.0/21
Signature Algorithm: sha256WithRSAEncryption
22:fe:6b:14:84:ea:46:e3:4e:89:58:be:99:94:f0:f6:0c:88:
17:b1:10:ae:73:32:c1:9d:98:f2:4e:50:d0:62:00:84:62:9f:
db:d3:62:1e:ad:63:a0:66:58:cd:93:fa:c4:41:28:92:f3:e3:
56:0e:5d:d5:73:a7:fd:72:8f:50:22:ae:7e:d4:b9:c2:d6:8e:
51:b2:26:7d:71:8a:1b:3c:72:ad:2a:f2:27:8d:58:82:b4:51:
1a:5e:93:ff:f0:51:31:64:71:e1:9e:8d:eb:fd:7c:66:b3:55:
c0:d1:a8:e4:fb:9c:c7:54:cc:68:c8:2f:a5:77:78:e8:3c:2d:
1b:ba:21:8a:ce:ef:92:30:4b:09:11:6e:79:ba:74:cf:20:85:
1f:1c:4c:8f:44:c2:36:fd:86:61:4b:d4:a3:99:da:e5:45:90:
9d:a4:2e:ca:ac:e5:7a:9e:66:47:e5:b1:58:f3:e6:c0:f2:cd:
85:8b:b3:99:69:ec:56:e7:65:b9:5e:58:37:38:11:06:bb:1a:
13:bc:b4:b8:30:95:b2:d9:9f:0c:9b:a0:98:f7:35:4d:35:39:
c0:9a:ce:2b:31:c2:68:45:50:61:60:72:b1:0e:fb:69:82:f9:
67:df:c2:bf:0e:34:89:2e:94:7a:80:b4:a0:90:13:92:91:dd:
d0:d2:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net