Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa
File: 3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa (raw, json)
Hash identifier: Okif/RmRt0co3enDOpJZvR1smn0hI4WYgWwtaOPt8Ms=
Subject key identifier: FC:7F:E8:99:DA:A9:B2:6B:B5:41:87:77:B0:65:75:F3:42:D3:DE:D1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 522026582EE51160D2CB209AC53850CA16D32E40
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa
Signing time: Fri 11 Apr 2025 00:50:22 +0000
ROA not before: Fri 11 Apr 2025 00:50:22 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.104.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:20:26:58:2e:e5:11:60:d2:cb:20:9a:c5:38:50:ca:16:d3:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:22 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=b25cf95b50437d766941d451f2812e0c1e84be0e4b54b92c1110d41df74f5307, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:e1:69:c3:20:f3:10:c6:8f:d1:47:39:b2:
d4:b1:5d:48:14:ce:2e:dc:a9:ee:96:30:a6:08:94:
66:26:fc:5c:a1:22:f2:a6:79:65:82:8f:c8:cb:d6:
3a:d6:ed:52:43:a0:43:59:10:4d:19:68:39:6a:fc:
3e:f4:0d:15:cf:25:ee:b9:eb:cd:31:0d:c1:fc:53:
fa:fa:2d:4c:38:10:aa:7d:5a:8f:e9:bc:11:93:ae:
7f:be:bd:20:21:53:51:13:c4:1c:bf:56:81:96:a1:
47:79:f1:8f:c5:95:07:78:8a:e2:4d:94:61:d7:a9:
b0:6d:8b:05:2b:7a:99:11:82:3a:6a:8d:aa:c2:53:
25:d7:5f:60:de:4b:07:dd:b0:d0:8a:4e:00:8e:8f:
a0:e0:f8:18:70:a5:16:6b:b7:86:a8:b6:3c:92:1f:
dd:71:b1:f8:7d:1c:f0:d9:04:3d:00:48:88:ef:84:
49:05:61:6d:8c:32:4c:38:7b:6f:a6:3c:97:ca:e6:
40:09:ae:53:b6:94:4f:86:e8:a5:4e:79:05:a9:26:
86:59:86:a9:18:79:b1:b0:9e:1b:5c:c9:f7:4d:13:
e5:20:1f:84:f8:22:bc:34:0e:73:24:1b:64:be:ab:
2a:c7:b2:13:0a:97:f5:7d:3f:f9:63:c4:fb:0f:55:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:E8:99:DA:A9:B2:6B:B5:41:87:77:B0:65:75:F3:42:D3:DE:D1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.104.0.0/13
Signature Algorithm: sha256WithRSAEncryption
86:22:55:1f:3e:01:76:bf:9e:b8:b3:ea:21:3f:d5:27:f1:5e:
3a:2a:84:6e:f0:a9:e7:a5:96:d6:7e:ea:84:64:ab:c3:05:c5:
bb:c3:ee:7f:80:de:0c:16:c1:8b:c1:88:63:54:11:ed:96:ce:
e2:a0:14:aa:6a:6f:35:cf:ad:8e:88:e7:5c:a2:dd:5f:24:9e:
69:6a:80:06:be:7e:29:e4:fa:22:57:39:55:28:dc:30:05:08:
f3:7f:a5:30:5f:2f:44:2a:96:38:56:aa:01:05:00:a0:58:cc:
15:25:10:92:fc:4a:d3:1e:31:e2:21:58:c1:84:82:31:aa:b1:
47:fa:88:68:48:08:69:08:db:d6:be:45:44:b5:9d:fe:4f:9d:
83:b1:00:30:83:a2:24:aa:05:20:d1:e4:aa:29:01:00:01:8b:
a4:0f:34:53:85:c7:bf:f8:5a:cb:37:39:43:c1:58:bc:15:4c:
cc:b0:ed:d6:13:15:5f:41:fb:2b:aa:42:cf:1d:10:c5:2a:1d:
37:9c:0f:f2:0b:25:37:dc:ae:56:ce:be:d4:f9:d1:19:a1:3a:
e6:5e:6d:d2:8b:e2:73:6a:21:17:71:fe:10:46:79:7f:c0:2d:
eb:25:1c:dc:7b:86:f0:ba:54:30:be:6d:35:60:b1:0d:0a:fe:
b0:df:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net