Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
File: 397b5a86-52b0-4a8c-87de-e6da77812b46.roa (raw, json)
Hash identifier: WRwWMHjG2kMQPtpkeQf/PAZ5NXJRixrsjENcJAdkA5w=
Subject key identifier: 1A:2B:6C:FA:B2:4D:B4:FF:CF:8B:DA:7C:34:16:2B:AF:26:A0:6E:30
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5D72C587E2B3FA6A89155A324A5C2DE411392A2F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
Signing time: Mon 31 Mar 2025 21:31:07 +0000
ROA not before: Mon 31 Mar 2025 21:31:07 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.248.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:72:c5:87:e2:b3:fa:6a:89:15:5a:32:4a:5c:2d:e4:11:39:2a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:31:07 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=b6dc0c61fccb774ffb98768013f358a66237208356f19ddc6a585ec487a478b2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:68:e0:ab:50:aa:3e:c4:1d:7e:29:07:de:
d5:05:c0:47:e4:fe:61:7e:35:3d:1f:a2:9e:5a:04:
ef:a3:aa:30:81:e4:7b:78:75:39:fe:04:6d:be:6e:
5c:12:db:5c:f5:07:8e:75:b2:ab:04:a1:9e:7f:60:
e6:a8:29:5d:17:8a:2c:07:e8:f4:69:0a:46:bc:30:
cc:13:bc:a9:77:80:d0:29:90:71:35:36:dd:3d:e9:
fa:f8:d0:b7:79:df:a2:c3:da:0c:15:73:e0:60:be:
8c:45:42:f3:d6:07:6f:f6:10:92:47:94:bc:07:e2:
45:a2:c3:4d:c0:7b:65:2f:62:36:55:d3:49:01:43:
94:32:72:0f:db:99:7a:7c:b0:ac:7a:00:55:0b:98:
e9:78:20:99:a2:63:ee:ef:62:10:53:19:e0:00:b2:
a7:c2:20:f7:c1:19:03:f6:93:a2:fa:2c:f7:90:93:
37:8c:29:a9:0a:c2:29:0c:f7:d8:8f:27:a6:e5:9c:
71:64:21:b0:0c:36:9a:fd:48:f9:9e:c7:fd:f6:da:
b1:84:15:60:63:54:a9:8e:d3:99:03:21:9b:8f:1f:
c7:c5:45:9d:0d:c2:20:42:36:d0:32:29:be:50:94:
7e:b3:7e:69:a4:69:4d:2e:b9:0f:0e:8e:64:b0:dd:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:6C:FA:B2:4D:B4:FF:CF:8B:DA:7C:34:16:2B:AF:26:A0:6E:30
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.248.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7a:79:24:2f:2b:90:af:95:eb:b2:fe:61:d5:42:bf:94:d8:3a:
0d:61:3e:6e:24:e8:57:7f:d3:77:3a:b3:68:11:da:6b:29:78:
66:95:d1:0e:a0:10:b2:ca:ca:88:8c:96:63:aa:cc:30:32:df:
ec:de:e6:f8:e8:58:a2:72:fb:9b:2b:a8:07:c4:dc:0f:be:bc:
b6:96:3c:9e:e0:39:5b:93:9f:b2:6b:c0:f9:b6:4f:f2:c0:6f:
22:fd:ad:bd:a3:82:3c:4f:38:b0:3e:89:46:6f:71:82:57:2d:
32:e0:0d:49:48:ee:bf:5f:a4:d1:a2:b7:c2:b2:b2:b8:35:81:
03:3b:d2:68:c2:cb:e4:28:79:38:59:45:1b:42:d0:aa:cd:81:
db:d6:2b:6e:48:59:6b:5d:4a:1b:a4:18:91:b8:11:1c:aa:f2:
2f:c7:30:f0:4f:9f:31:b8:c6:33:3f:a4:33:42:88:05:1e:c8:
80:13:23:47:dd:3c:94:57:e0:18:7a:7b:27:d2:af:ba:94:62:
bc:d9:46:e4:e1:c6:9c:01:20:b9:1a:0e:00:d3:a3:49:d4:24:
f7:e4:dc:8b:ae:23:df:37:5a:1f:da:26:de:81:76:30:8d:fc:
58:17:34:a2:75:d1:28:48:80:ad:1f:28:a9:74:87:21:ae:d2:
fb:d1:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net