Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
File: 44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa (raw, json)
Hash identifier: l8CZzar2IJ1RAlwadgjCkczgUWQmSjb41tzh3I3tB38=
Subject key identifier: D9:36:B4:9D:36:D7:51:91:F3:97:F7:01:F9:99:81:2D:50:6C:26:E3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 312A2923A2DA1E248B04D56670F3FE36AE4959A8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
Signing time: Fri 11 Apr 2025 00:50:17 +0000
ROA not before: Fri 11 Apr 2025 00:50:17 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2a:29:23:a2:da:1e:24:8b:04:d5:66:70:f3:fe:36:ae:49:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:17 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=365984e50e047273bf2fdbd2479a9d4b65ae4af30a9a1840c3a49f2c45b5c17e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:11:09:0a:53:7c:84:70:4f:3f:7c:e4:2a:
18:82:0e:d5:85:ab:07:a7:2f:8a:09:a9:b1:7c:88:
83:f1:45:c8:f5:84:a1:2d:8b:1d:39:ce:83:18:88:
c3:8a:12:bf:ff:ce:6d:84:14:de:c4:6e:e1:3a:a4:
6c:5a:72:33:10:f9:bc:36:cd:8f:79:80:6a:90:25:
d8:58:4a:b5:a7:69:1a:5c:ba:62:d5:bc:fd:be:87:
e8:e5:a2:06:de:4a:fc:53:f9:ed:39:aa:73:a1:1f:
46:5c:a3:94:7e:a5:a2:be:9a:cd:91:79:7e:b4:97:
6c:16:51:92:6f:c5:c0:9d:0a:c2:a7:af:9b:a4:5d:
a2:d9:ef:19:e8:1c:a4:ec:fa:8a:25:1c:fa:c8:4e:
b4:43:7e:11:54:cb:f5:ca:d7:4e:d6:3f:d5:9b:b9:
8d:72:fc:9a:0c:f0:85:a1:56:1f:42:7f:ec:5d:1f:
d6:10:23:39:c5:3e:39:c0:98:65:eb:07:4c:59:d4:
e6:a0:9f:43:85:3a:68:b4:4c:84:29:00:f3:ef:81:
c1:05:9d:fc:af:24:68:f5:ae:78:a0:31:ae:e8:a1:
a7:8c:a8:8e:a1:03:60:0e:51:fa:95:68:64:33:ca:
af:d6:89:0a:08:9d:d8:9d:c0:a8:cc:67:e8:f9:ca:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:36:B4:9D:36:D7:51:91:F3:97:F7:01:F9:99:81:2D:50:6C:26:E3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
61:a7:ac:c5:c5:76:6d:88:5f:d7:ee:83:99:9b:51:7b:e9:5c:
71:57:e9:25:21:01:ad:f7:81:35:e6:bb:3f:54:7e:4c:13:d2:
4c:42:00:88:d2:c2:98:4d:20:17:d2:2d:96:54:74:46:26:9d:
3b:4e:19:5a:08:98:63:22:44:56:82:f4:91:50:94:1b:44:eb:
7b:ed:e2:51:30:a4:cf:c6:9b:a3:98:9f:c7:7f:14:c1:98:29:
3a:36:4d:90:42:f9:86:57:6e:8a:ba:ac:3e:2f:5f:25:fe:8c:
f1:6d:29:65:04:b4:0d:28:d3:dc:9e:a8:56:83:13:08:01:f0:
8f:4e:57:ac:88:1f:2a:37:6e:6a:ad:1d:16:f7:b2:98:39:86:
26:cc:88:b6:fd:f1:79:f1:85:25:f2:11:e7:f2:f6:85:60:dd:
8b:79:0e:35:02:2c:ee:15:f9:61:f8:e6:a6:51:b6:2a:49:46:
c4:45:b0:ae:1b:41:e5:31:fb:da:11:ed:e5:a0:32:cd:b4:b2:
f9:64:bc:c5:f8:1f:ef:a5:fd:8d:cc:3e:ab:06:58:42:7e:14:
bc:83:fd:70:af:f3:18:21:c3:7b:64:36:4f:de:37:f9:4e:1b:
67:05:6b:08:d4:44:ec:41:65:ae:e2:5b:f2:19:11:5c:81:3e:
a5:2b:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net