Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
File: 60c12693-1526-46ae-aa45-d5276a0c0f79.roa (raw, json)
Hash identifier: 63Nkp/RsQjDDUUWPD9vAQXkTZb5gVXkrIF9OCkAfTXc=
Subject key identifier: E4:38:C3:7B:54:A6:9D:EF:24:4E:B0:51:F2:64:D7:C0:A8:D6:5E:BE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47D0ABF4D0C4C55785201F8DA6C12524ABB0DB8E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
Signing time: Tue 01 Apr 2025 15:11:17 +0000
ROA not before: Tue 01 Apr 2025 15:11:17 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.86.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d0:ab:f4:d0:c4:c5:57:85:20:1f:8d:a6:c1:25:24:ab:b0:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:17 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=17fcb6e1bb7e8c2c1d387971f79e265238e9485d9df87c6a11cde2b626b60e91, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:68:8c:a2:5e:c4:19:d2:b2:2f:35:04:84:
63:f9:f5:3f:07:ba:9a:c9:35:7d:70:ed:99:27:3a:
fc:ad:78:85:9d:0b:42:c6:67:13:1e:bf:21:9d:96:
d7:53:08:41:52:d6:b1:3d:9d:98:19:ff:1f:82:3a:
72:b4:ea:3d:35:10:fe:cc:f8:91:fe:46:0b:8c:14:
bb:0d:1f:f7:73:d3:08:e6:87:81:a2:99:83:cf:7b:
12:aa:2b:52:93:7f:07:d5:3b:73:eb:9c:53:f7:d6:
c5:19:03:8a:2e:da:0b:16:6b:e3:12:d2:11:e5:86:
c5:23:fc:2e:e9:6d:57:58:dc:a1:5e:b0:9e:e8:c5:
5c:80:0a:fb:16:6e:02:b8:df:40:23:ec:25:27:7d:
1f:1b:72:2b:5e:25:b6:58:47:75:54:b3:18:21:cf:
ef:e7:33:16:5e:45:99:62:d2:9c:ec:08:7e:da:e9:
fb:79:46:bb:55:b4:7d:bd:fe:17:07:ed:e9:82:de:
74:d6:6a:d1:2c:62:05:61:88:62:1d:16:b5:5e:d6:
72:52:55:71:db:7d:81:16:c6:cb:e8:8d:0e:bd:7c:
33:a7:a6:f5:ec:60:b0:1a:4c:9d:e2:32:c6:49:a0:
ef:81:95:df:80:68:8c:09:aa:ca:5f:1a:99:d6:b9:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:38:C3:7B:54:A6:9D:EF:24:4E:B0:51:F2:64:D7:C0:A8:D6:5E:BE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.86.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6e:3a:b6:38:88:c3:97:26:b7:01:94:7d:81:e6:f4:d2:ba:cf:
9a:97:cd:de:6c:c2:8e:92:92:ed:22:57:21:14:e3:3b:a5:13:
fa:ff:55:3d:6f:93:5b:4b:bc:66:8d:8c:1d:7c:a4:22:60:be:
71:de:47:56:39:fe:eb:9e:26:a3:43:67:d3:79:52:8c:32:3c:
01:17:14:16:99:e3:c8:d2:de:25:6a:22:2c:bb:22:b5:ac:f6:
47:95:07:df:1d:03:a2:8c:c5:66:9b:f1:3d:ff:8f:0f:a7:77:
74:46:8a:7f:52:8f:c5:31:a7:e3:1f:7a:13:4c:11:d2:d0:03:
9c:71:5f:3f:86:46:b1:68:37:69:38:bc:e8:e8:1c:05:81:db:
5c:3d:4d:52:90:44:d7:70:d6:50:4f:26:14:bb:d8:0f:64:54:
a1:48:16:0c:95:71:92:31:ed:3c:3d:a9:6c:f4:f3:08:54:57:
54:1d:0b:a8:1c:6d:67:51:7f:24:83:c4:4d:c4:0d:2c:34:80:
e7:8e:f5:1c:aa:2b:da:2e:5a:26:b2:1f:2c:cd:35:75:92:ba:
bb:b0:e8:fe:1f:ca:96:29:6c:99:1f:ac:9f:42:1c:31:d9:1a:
f9:09:bc:d5:c0:1c:58:bb:22:47:d4:ce:b5:63:49:f0:12:c8:
02:57:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net