Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
File: 695716ab-c4db-435d-95fe-4143be62030e.roa (raw, json)
Hash identifier: bdR+27tLN7QcqtgQHaeOJLC2VxcdRJRtWo04tIzl5uU=
Subject key identifier: D9:6B:68:04:92:39:53:FA:30:81:48:CD:BE:B0:8F:B6:E1:DC:13:F4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3B0F6276E71DF2023BB99853158D9744DBACC2EA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
Signing time: Tue 01 Apr 2025 15:10:05 +0000
ROA not before: Tue 01 Apr 2025 15:10:05 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0f:62:76:e7:1d:f2:02:3b:b9:98:53:15:8d:97:44:db:ac:c2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:05 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=a27f4b9181d16c5a5e2d9c4b7c7d5ce5ce2a5f6fc2ea80887ad6ea3837e1bd84, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:f6:e0:b0:5f:80:77:15:6e:ec:bb:5f:57:
35:1e:79:b9:fb:c1:3c:38:2e:22:a0:3e:00:61:f5:
ce:79:17:a6:76:ad:b2:d6:0a:a6:24:e3:b7:ff:61:
54:32:3b:13:4b:ee:98:4e:bb:d1:36:c1:9f:18:09:
7e:da:a5:57:af:95:6b:e0:22:62:71:0f:1e:c4:b3:
26:ca:48:0a:e0:72:32:e7:cd:11:d1:ff:c4:3b:49:
25:54:d7:27:1d:9d:6e:9a:65:1f:d2:dc:0e:25:4d:
bc:ca:69:ea:8c:df:a4:b6:bc:1f:20:59:ee:b8:8a:
0f:e9:19:21:76:79:3b:83:34:32:1e:1d:84:66:c4:
c6:cd:b6:b6:61:b0:af:21:30:31:3b:ea:b6:6b:75:
69:14:be:7a:4d:bc:b8:57:4a:7b:ff:73:3e:a5:a3:
0c:ce:c2:a3:23:a2:a5:63:7a:7d:d2:ca:1d:0a:a4:
b9:bd:be:04:d5:90:d8:5d:36:c4:0f:32:86:d7:ef:
49:9f:71:64:cb:d3:96:6a:d0:56:a3:69:93:77:23:
3c:e3:88:5c:8d:cd:0f:c5:42:53:12:20:85:69:1e:
4f:13:42:c8:47:a2:7a:3c:ab:bb:78:c6:e5:59:50:
ab:62:4f:70:6e:cf:39:3a:5e:fb:15:54:39:9e:a6:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:68:04:92:39:53:FA:30:81:48:CD:BE:B0:8F:B6:E1:DC:13:F4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:c5:24:d2:71:97:57:2d:f5:89:a4:a6:c4:da:b0:39:9d:54:
fd:0f:5c:4f:ee:bb:dc:1e:99:b0:6d:0f:5d:45:e3:c4:1f:22:
77:05:c5:d8:78:ca:12:e3:77:e9:9a:0c:a2:18:a9:fe:d6:4a:
7f:83:fa:98:a6:5f:5a:b3:db:80:82:f2:d2:10:4c:74:49:40:
75:52:f1:8c:61:4c:e0:05:2d:6e:74:f5:46:ea:cb:0d:f0:76:
77:5a:69:ba:ae:34:93:c7:54:a0:04:0a:3a:07:8d:27:30:d7:
4a:93:c9:a5:39:4a:a2:99:cc:5b:a4:d2:0e:eb:f4:a3:f9:09:
d0:15:4c:e3:81:7c:ae:18:5e:65:f5:b4:96:0c:b6:1b:86:8d:
9a:14:3c:61:3e:ff:84:45:80:b5:41:0f:ac:89:d7:d3:7b:0b:
a6:5d:fe:fd:47:8f:14:83:8e:03:e9:77:d4:ee:d4:08:50:e4:
62:8b:e3:1d:98:0b:fe:36:db:ec:87:cd:ee:5d:81:0e:67:9d:
61:93:3a:fa:84:c7:a5:15:d1:ae:2b:37:0e:fd:11:e8:14:9a:
e9:1b:bb:b1:7a:d4:a9:dd:f4:f9:36:67:92:e2:ca:dc:72:88:
60:f1:94:5d:62:57:ec:84:7e:01:cb:d6:bb:5e:9d:68:74:16:
dd:23:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net