Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/69988e45-d4fb-4896-be53-951c20d12c48.roa
File: 69988e45-d4fb-4896-be53-951c20d12c48.roa (raw, json)
Hash identifier: QI/dfZd6n2dJ8s7SjkS2mf8ov3Fqoc968sLIIfjYJCs=
Subject key identifier: 6C:31:94:E9:B3:78:40:CF:D9:A3:87:0B:A3:CA:0F:AB:98:19:16:4D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 37B5B305CC94F796011FD8D26DF5017F315EB355
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/69988e45-d4fb-4896-be53-951c20d12c48.roa
Signing time: Mon 31 Mar 2025 21:30:17 +0000
ROA not before: Mon 31 Mar 2025 21:30:17 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a11:47c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b5:b3:05:cc:94:f7:96:01:1f:d8:d2:6d:f5:01:7f:31:5e:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:17 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=7b270305953ef298cf6f1935d215d7ac99d57be739a4fc2ea4fef97b67934ec6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:0f:8b:63:b8:47:49:69:9e:fb:4b:14:e2:
29:74:17:7f:bc:6d:0f:fa:88:70:96:a5:8f:48:6b:
d1:8c:96:6b:12:e2:59:c0:4d:19:37:b1:81:79:71:
6d:5b:61:ca:8e:47:6d:48:48:ce:a8:b8:a9:b9:9e:
8e:84:67:e2:7f:09:e3:72:9c:4e:dd:d2:99:ac:ef:
89:5e:8d:57:ad:8c:90:9c:7b:8c:6d:3d:f5:b1:37:
04:16:cc:e8:32:96:27:75:11:a5:b8:e1:fd:16:ac:
16:4c:d2:80:8b:39:9e:74:aa:42:97:7e:d1:f9:3b:
9a:6e:76:3a:28:f3:f1:e8:ab:70:9c:ab:26:b0:52:
e9:04:b6:85:bd:f4:37:9d:39:e5:6a:40:46:7f:07:
99:f3:18:7d:72:99:c2:f2:8d:33:57:c9:19:81:91:
67:51:76:36:d9:f1:18:85:e4:cf:a1:70:62:3e:c5:
14:31:72:65:99:8c:38:07:54:52:2f:74:25:01:c2:
ac:c6:5b:ed:d6:59:c8:d2:55:91:80:78:8a:49:c3:
b5:e4:76:f9:56:2a:2d:dd:5c:1b:5b:8a:9e:44:fb:
8e:10:7e:1e:85:12:ba:ec:f5:18:84:c7:47:b7:b9:
3a:a9:1b:d4:1b:a2:0f:a2:2c:99:b2:17:4f:51:02:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:94:E9:B3:78:40:CF:D9:A3:87:0B:A3:CA:0F:AB:98:19:16:4D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/69988e45-d4fb-4896-be53-951c20d12c48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
20:82:54:e2:b1:1f:62:0a:a6:4d:7c:c7:97:3d:3f:18:f2:4d:
58:9c:86:93:9d:53:69:f1:9a:22:21:49:79:94:5c:c5:8c:44:
00:4b:4b:a2:9b:ed:5a:a3:50:95:36:9c:7a:2a:51:83:16:95:
b3:52:25:ca:6c:25:99:19:b9:4b:86:3b:90:f0:a2:ef:1d:d8:
fc:7c:c8:49:ff:8c:9b:3a:f2:66:49:15:fb:34:4f:30:13:df:
a7:6b:b2:e2:ce:29:e0:30:a9:48:71:f7:ee:6d:4c:fe:c8:30:
d7:da:d1:d5:fc:13:a4:4e:46:66:35:95:cb:3b:b5:86:50:69:
f8:e9:0d:28:1c:a4:d3:07:e7:5c:5e:47:13:1f:dd:27:8b:45:
55:28:16:f1:2d:6d:ae:5a:86:cd:8a:d4:a9:4e:de:fe:e2:4e:
f9:fa:64:f7:8a:47:ac:8b:0f:cd:46:29:8b:50:0f:e4:93:75:
10:85:4e:89:20:b6:2c:14:1a:b3:22:c2:52:62:04:32:9e:08:
b2:b3:a0:75:06:24:1f:d3:aa:30:07:29:99:6a:bc:30:c2:5a:
fe:93:9a:57:29:27:c3:cd:27:63:19:83:0a:80:bf:64:73:b8:
1b:25:1f:a1:0b:be:48:35:68:48:9f:db:cb:f1:58:bd:52:cc:
e3:87:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net