Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/41816f61-5ce3-406a-8d78-37c4eafa6915.roa
File: 41816f61-5ce3-406a-8d78-37c4eafa6915.roa (raw, json)
Hash identifier: /ezc2TB8Y9+XZQKxrZNwxmnjSAQW54SZnpy/0PddBcc=
Subject key identifier: A9:B1:0C:38:19:FD:95:43:F5:21:0B:B3:8F:11:BA:33:39:06:DF:70
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 46B03D4D768E7882BA279DA50BBA0BF788055A51
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/41816f61-5ce3-406a-8d78-37c4eafa6915.roa
Signing time: Mon 31 Mar 2025 21:30:18 +0000
ROA not before: Mon 31 Mar 2025 21:30:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b0:3d:4d:76:8e:78:82:ba:27:9d:a5:0b:ba:0b:f7:88:05:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=76f64ab2e0a15c743ac82a00f4b79fbd1ccfedf71223fbd39814da7d4ed0f409, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:5d:05:f1:65:db:76:4a:ea:b3:cc:b3:d0:
63:a4:58:ea:aa:4b:80:a3:47:eb:6e:04:d3:bf:ec:
79:03:29:f9:ab:bf:0c:eb:18:8d:fb:aa:e1:15:9c:
4c:49:b3:ca:56:45:92:f5:d1:74:81:39:6a:68:5d:
4b:2d:9b:86:f5:a8:25:84:e7:9e:2a:e5:50:32:a9:
4a:73:60:35:e3:fe:ad:cf:e7:6e:af:ca:89:18:b3:
3d:a6:57:c1:72:13:fb:fd:3f:91:f3:33:21:82:97:
78:c1:74:14:d6:1b:ba:89:07:04:94:3e:c0:d9:c6:
ce:e3:9a:ee:74:e3:0c:90:81:59:b5:df:1a:e6:bb:
38:57:68:b9:63:02:44:75:fe:21:67:5d:48:fc:73:
c1:90:54:01:13:80:55:e5:a6:e1:3a:fb:29:70:7e:
2f:fc:2c:ad:15:5d:b5:6f:3f:9f:0b:5c:a4:7e:c7:
02:cc:d3:62:0c:54:44:3d:79:bd:d2:df:69:a7:ff:
05:fe:6a:90:86:a0:8b:a3:8c:7a:c6:65:bd:76:48:
ed:38:1c:a2:d3:a9:d2:cf:dd:b1:f1:b2:9b:9b:4e:
fc:b6:3b:a6:2b:ba:a4:4e:6a:89:78:83:b7:7e:43:
da:de:58:72:e5:a1:85:a7:5c:3d:cf:84:6a:fc:a7:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B1:0C:38:19:FD:95:43:F5:21:0B:B3:8F:11:BA:33:39:06:DF:70
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/41816f61-5ce3-406a-8d78-37c4eafa6915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d6:25:3f:5b:61:0d:d9:e8:66:f5:7c:6f:9d:b2:f7:f4:b7:ae:
c9:bd:09:07:5e:27:07:af:48:4b:95:33:44:93:da:63:d6:fc:
d7:a5:fd:a2:70:7f:fa:45:33:dc:06:0d:41:09:90:98:ee:de:
07:2a:3a:c0:c1:bf:09:c8:00:a9:eb:eb:13:69:92:42:91:c3:
e8:ab:93:4e:87:c8:7b:f1:47:c8:2b:38:4e:6d:61:f6:1c:4f:
b2:ff:35:39:b2:db:37:d4:6d:05:29:b3:b9:6f:37:e3:a5:46:
57:b2:de:a5:42:93:08:80:8f:eb:b0:49:c0:5f:c3:1d:8e:7e:
ed:69:6f:6b:e7:11:a8:a6:58:10:8f:a0:01:83:62:23:56:ab:
23:e0:ee:d8:f3:33:08:ac:45:66:a7:ac:b1:e1:37:74:ed:f2:
79:09:1b:e5:bf:53:8c:18:15:82:99:03:47:8f:01:a6:e2:03:
91:da:64:f4:43:58:d4:84:c7:59:d2:67:47:67:05:9d:22:76:
d1:d6:42:73:77:0b:db:cd:4f:1d:84:e0:42:34:82:17:d5:cd:
f4:27:76:65:92:6a:cf:4e:00:19:b8:43:a2:18:16:78:75:9a:
c6:04:ca:d4:99:c0:56:0a:15:f5:0f:d0:ef:a8:6c:fe:ec:c8:
59:67:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net