Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
File: 54f9687d-a273-4060-846b-ce640aca7c79.roa (raw, json)
Hash identifier: vNvY98pj5W1FZC+hjIzkuBVhEbSpPeD85YeWYv4J5ZI=
Subject key identifier: FF:08:5A:8A:B3:68:19:3E:0F:C1:8C:E0:AB:6B:E5:35:1E:A7:6E:0E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48E75035D854F6A9A0BEE40C90782EA2B7916EF2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
Signing time: Tue 01 Apr 2025 15:11:10 +0000
ROA not before: Tue 01 Apr 2025 15:11:10 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e7:50:35:d8:54:f6:a9:a0:be:e4:0c:90:78:2e:a2:b7:91:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:10 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=c0da4a89196c7b340f9a3f38748aacfb10559b098820c5be2136243dc8df7d45, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:81:c1:6e:39:ac:0a:0a:b5:44:98:6a:3e:
21:b1:ca:82:3e:f5:e2:24:da:74:b7:bf:fe:2c:3d:
79:6d:2b:ea:ad:f1:7d:8d:96:7d:d2:f1:56:e6:16:
10:14:39:f9:2d:b7:66:35:8c:88:8a:e7:1c:c0:e9:
a1:ef:22:dc:77:f8:46:7f:6f:2f:5a:f2:c1:2a:e2:
00:44:2e:e0:45:09:68:02:a3:14:9b:2a:82:ac:58:
e4:a8:53:94:c7:d8:05:1b:5e:fd:4b:b5:56:cb:1e:
b6:a8:b6:c9:d9:62:10:b2:79:4b:16:15:df:03:65:
3b:ae:f9:84:9f:09:67:39:92:30:0c:0d:db:6b:3d:
9a:57:85:25:05:1d:4a:a6:2e:45:b6:bf:46:8b:fb:
2d:ee:1d:0a:36:15:90:3d:b1:17:41:c1:73:a9:cd:
22:f2:f7:f6:5a:80:6e:bf:bd:cb:86:13:5a:86:93:
01:27:3e:96:58:39:79:ba:b7:24:f2:58:fc:0c:67:
d4:9b:ef:10:16:42:74:22:93:b4:9c:3b:18:8a:58:
36:c0:4a:92:e0:4c:32:ea:ec:e1:8a:51:eb:c1:76:
29:37:11:45:a8:9a:14:ca:57:3e:dc:04:3b:6c:90:
ea:29:2e:d8:a2:25:39:c3:85:46:ba:8a:66:3a:9c:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:5A:8A:B3:68:19:3E:0F:C1:8C:E0:AB:6B:E5:35:1E:A7:6E:0E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/14
Signature Algorithm: sha256WithRSAEncryption
11:15:d8:26:8e:05:be:47:40:90:c4:e1:0c:e7:a2:66:62:49:
db:3a:33:b8:bd:60:f9:4d:b1:28:10:02:31:00:c0:e8:1e:dc:
a4:51:a3:30:18:4c:e4:8b:ef:1f:b1:e8:49:a6:6c:86:bf:ce:
fb:a8:cf:eb:f2:42:92:43:53:96:8c:cb:67:b2:80:c1:f0:d8:
65:4a:46:33:73:9c:f4:7d:35:31:22:fb:7b:44:a7:69:04:0d:
95:96:67:70:e5:85:d1:e9:90:af:84:dd:22:41:18:b5:c4:83:
32:d8:33:d7:33:d4:23:97:25:61:61:1f:6b:7b:71:3a:0e:ae:
e9:43:59:81:72:d3:90:d5:e0:63:f3:f3:e6:ef:c5:b9:d4:84:
40:a7:65:90:73:04:6b:b1:94:b3:49:d0:37:37:7c:4f:5a:33:
44:e4:c3:9b:46:7e:08:b4:a5:7d:69:80:cd:37:8b:d2:01:2f:
da:59:d8:64:43:3a:0e:ed:24:3c:c5:03:d8:29:26:80:44:e8:
49:64:46:50:0b:f9:81:25:ee:1d:45:75:86:f1:b1:5a:78:b2:
3e:7f:83:d4:13:d6:aa:2d:e8:a8:92:75:92:3f:39:11:f5:11:
bd:a5:b9:dc:ee:ec:db:fe:38:fe:bf:7a:29:87:bc:92:4f:42:
14:20:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net