Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
File: 49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa (raw, json)
Hash identifier: +qOcWoziPHFE52he4UlABloF73xCLisvrFBQoIyXM7Y=
Subject key identifier: FC:9D:2B:A5:0C:6D:ED:90:DE:33:07:16:1D:DA:A3:F3:95:49:9C:66
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4C8CD7DD26639D111D4B0CEE20BBE2ECA52FC399
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
Signing time: Mon 31 Mar 2025 21:30:47 +0000
ROA not before: Mon 31 Mar 2025 21:30:47 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.192.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8c:d7:dd:26:63:9d:11:1d:4b:0c:ee:20:bb:e2:ec:a5:2f:c3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:47 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=83556b3eea6558789c35e39c08a5016c1cdff64a2011c48271452b011d5ac9c0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:67:12:52:bf:43:11:0e:e2:33:63:39:0b:
54:37:d3:35:45:44:ea:6e:05:da:52:25:79:0b:b2:
c7:d8:1b:9c:02:83:0d:c1:9e:a4:44:15:c7:ae:f3:
17:b3:ae:54:76:95:e1:da:f9:ec:5b:e1:87:4c:f3:
d3:f8:51:6d:4e:f0:92:d6:b5:d4:ff:fb:9b:af:35:
76:5b:45:51:6d:d6:35:7e:d2:05:a5:fd:6f:59:2c:
06:8d:6e:10:c8:18:37:f9:39:3b:52:bc:cd:93:07:
c9:c0:3b:cb:9e:8a:0a:6c:a0:58:2a:ec:4f:df:31:
a6:78:2a:49:3a:8a:cd:db:1e:50:98:dc:7c:4a:d7:
ba:29:6a:de:d2:8e:4b:2b:da:a3:4b:8e:b4:93:01:
74:38:90:1e:27:51:5b:7b:7c:c9:ba:de:d3:f7:4f:
4c:14:89:1d:d7:52:3e:67:bc:7d:ee:dc:ff:a0:ec:
4e:cc:5a:5a:39:da:71:e9:98:5b:a8:ea:fe:fa:66:
80:c4:73:9f:bc:a7:2d:88:42:75:06:9d:f7:bb:96:
50:cd:15:81:ba:be:86:90:9a:9f:ed:3b:64:94:62:
f9:bc:30:a4:22:21:71:c4:2f:e8:94:69:81:b3:c4:
82:79:fe:e3:07:8b:99:97:f2:78:95:30:d5:3c:99:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:2B:A5:0C:6D:ED:90:DE:33:07:16:1D:DA:A3:F3:95:49:9C:66
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
50:43:9b:7f:47:8b:78:09:b0:c0:2f:ac:21:e7:07:f6:8d:8c:
29:2d:2f:72:26:d7:2b:11:85:4e:28:ad:05:2e:54:49:cf:8c:
70:68:65:78:f8:a4:ea:a5:ba:43:29:fa:a0:55:96:55:05:fa:
ce:08:d1:6c:13:f1:84:fd:58:91:7d:5a:09:0c:a1:c0:2e:86:
5c:8e:54:e4:ef:88:00:3d:30:b8:b6:32:fa:89:b1:ca:7a:f3:
ee:6e:a5:9a:ff:13:c3:aa:71:a0:3b:8a:df:a2:e8:b5:f3:84:
19:65:c8:8a:9d:c1:53:32:41:2c:7a:b1:e1:9b:2f:ac:11:f8:
e4:3a:2b:3c:ff:75:13:24:a8:08:2b:6d:6c:77:07:03:04:ec:
15:30:32:86:44:29:84:48:d5:ca:ce:98:18:93:77:bc:7a:81:
3a:1d:78:32:65:65:a8:a6:3a:ea:d4:5c:4f:5a:ef:5a:71:8f:
39:31:27:1b:fe:5d:df:4f:16:0b:83:65:6e:e9:58:da:df:5d:
2f:82:cf:c7:24:fd:a6:d5:4a:18:f3:6e:89:53:de:58:a1:6a:
be:26:d3:2d:e2:18:d7:22:d5:ac:13:25:ae:75:f0:7e:32:3c:
85:30:29:05:ae:3a:75:ad:d7:fe:ab:25:cc:64:0b:3e:77:8f:
d1:02:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net