Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
File: 7dc90e26-05aa-40c8-bbd0-967e095d6485.roa (raw, json)
Hash identifier: h40p1u0xo9vESKB9+NZr5FbjFpJiOTP8n+SwOTGaE1c=
Subject key identifier: CC:6A:C9:36:92:21:3F:36:65:6A:32:BB:E6:97:32:9C:67:07:2F:78
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7792A026BCF6B2DDC63FA4C0BA4DF23EDEF119C3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
Signing time: Mon 31 Mar 2025 21:20:03 +0000
ROA not before: Mon 31 Mar 2025 21:20:03 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 143.65.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:92:a0:26:bc:f6:b2:dd:c6:3f:a4:c0:ba:4d:f2:3e:de:f1:19:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:20:03 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=9d9091f398d844584f42535a9e3c76df407cb93734d9f848b3a1b616f2c9080d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9c:30:f0:77:68:df:7a:82:18:15:0b:ae:df:
a5:3d:cb:65:d2:37:4c:e0:cd:1f:b8:59:e8:76:f2:
20:68:6b:78:91:35:07:f2:52:f0:91:7d:1b:c6:fd:
51:0f:30:83:2d:ae:9f:2b:36:69:e6:d4:2c:84:6b:
70:dc:24:e0:83:78:b0:2f:cf:cf:ad:89:61:2a:8c:
fc:e9:4e:8c:f3:cb:45:69:46:e9:bc:42:a3:88:7a:
d0:76:6d:1c:7d:95:9e:99:0b:04:8b:8d:f6:40:35:
66:3b:0d:63:d9:93:02:f4:6c:28:c8:71:30:fc:6c:
e9:e0:a3:91:11:43:2b:41:e0:c2:92:cb:8c:b7:1c:
72:cf:e9:d4:b5:c8:76:83:e1:98:ec:00:6b:53:4d:
ea:d6:62:1e:a3:14:98:ba:a4:c4:17:d2:76:01:b4:
d9:22:b6:ca:e9:2b:82:10:01:8d:c6:a5:15:dd:c2:
2f:a6:4c:df:a3:a2:1a:35:91:28:b4:2e:ad:22:fc:
1f:b3:e8:60:a7:44:7b:a7:6c:ad:cc:df:60:0e:69:
85:8c:2e:44:73:51:69:e9:c2:27:87:b8:fa:f1:14:
8a:f2:8b:6e:91:92:a9:c2:44:a9:8f:f1:99:7a:07:
7a:6c:df:ce:ec:a4:78:ba:6d:bc:82:38:e6:b3:f2:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:C9:36:92:21:3F:36:65:6A:32:BB:E6:97:32:9C:67:07:2F:78
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
94:df:8c:5c:b8:90:7a:83:9f:92:b7:09:f4:8c:98:9c:11:04:
ca:e3:53:58:ed:75:be:40:62:fe:51:2c:97:3a:d7:cc:88:05:
a5:69:11:f5:cf:5a:5a:31:55:97:94:89:df:73:a8:b0:25:c6:
5e:39:fa:91:80:a2:3f:20:7c:09:c7:8b:2e:f3:dc:9c:bc:47:
4f:11:43:a7:c2:ef:1b:44:62:73:c7:e0:b0:48:c5:fb:0b:ba:
48:ea:cf:81:1f:22:88:22:6c:60:74:f7:25:64:3f:5b:42:a0:
f2:0d:6e:ed:6c:31:ec:31:0d:e1:2a:d0:f7:c3:41:66:7b:cf:
2d:a7:5b:6e:b4:11:b1:17:4d:cf:21:d7:7d:8d:2c:a7:77:18:
94:8c:f4:c7:c6:58:e0:ce:1c:00:ae:8a:21:37:f3:f4:5d:be:
e2:6b:72:fe:52:32:70:9b:21:6f:c1:48:3d:7f:81:c9:46:2a:
63:66:fe:59:21:bb:6a:c3:f1:cd:a4:e5:d1:f8:a2:a5:6f:f7:
5d:38:97:8b:ae:4d:7b:0b:83:a3:51:f5:8a:fb:f8:b6:cc:90:
95:04:34:d2:b9:f4:bc:e9:ca:11:77:7d:40:55:09:fe:77:35:
d5:93:94:9a:94:1c:f7:c1:80:83:a1:dc:29:40:27:9b:08:99:
ce:42:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net