Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
File: 7f244d46-87ad-4224-b593-bd81b505345a.roa (raw, json)
Hash identifier: 0ZmuEQf8D0SSNACGFmKvu1NlItPZ6+rH5XfDNDxORco=
Subject key identifier: 20:BF:6B:36:65:2E:B0:56:8A:66:CE:19:46:3F:E7:AD:02:0B:80:74
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 450B84BD7EF73909291A5020B79032E11A4A1CC9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
Signing time: Tue 01 Apr 2025 15:10:49 +0000
ROA not before: Tue 01 Apr 2025 15:10:49 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0b:84:bd:7e:f7:39:09:29:1a:50:20:b7:90:32:e1:1a:4a:1c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:49 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=90afb58e0f4ecf9a2e330721d5b543d04f79133b3e2ff8ff5d400943c1dd551f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:48:2b:9a:83:ad:c9:b0:64:8a:d9:c7:99:
35:f0:b0:0d:e5:7f:30:74:1f:e9:04:10:86:e3:39:
19:be:9e:75:65:f0:fb:c2:a9:e7:fe:54:3b:3c:5a:
82:7e:00:ce:6c:0d:4e:f7:22:9a:9d:d2:bf:fb:93:
b7:66:91:1b:96:fb:3e:07:cf:85:df:65:18:fd:2a:
17:1b:9b:3a:fb:81:48:3a:6f:cd:86:38:f1:f7:3c:
29:88:85:af:dc:2c:54:ff:f9:c8:fe:31:8f:2f:1e:
52:43:95:93:56:85:2e:d7:9f:51:31:ba:ba:38:67:
ad:d3:1e:3e:f2:24:59:e2:c9:40:ea:92:12:1d:5b:
72:f5:b2:26:cc:77:1a:47:a1:f8:29:9b:52:59:3d:
85:17:c1:4b:f9:de:40:a7:b2:7a:67:7d:64:28:a3:
3c:85:97:33:e9:5c:99:ec:74:d0:77:5f:5e:50:5a:
65:ad:e4:14:99:73:72:8b:58:21:92:08:16:53:05:
14:db:4d:70:3c:48:12:a3:ba:f9:5d:98:67:ce:67:
1a:e7:f8:40:83:c0:57:67:53:c1:c6:b6:c2:fe:45:
38:b2:b7:26:7f:d3:09:c9:1e:3e:72:dd:84:0d:81:
eb:27:1a:5a:67:17:2b:43:04:ac:0e:e3:d5:c3:87:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BF:6B:36:65:2E:B0:56:8A:66:CE:19:46:3F:E7:AD:02:0B:80:74
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:4f:46:6e:de:33:05:d4:94:e2:82:1a:87:20:3a:31:97:c2:
0b:f6:6b:55:ad:18:cb:d0:1b:fa:7d:79:8d:13:4c:e1:93:25:
e2:14:e0:51:8a:21:ff:8c:c6:aa:1b:cb:ba:af:1f:f8:61:d3:
90:d3:cd:24:b4:4e:23:45:27:5c:c9:32:46:8a:85:50:fd:68:
59:62:a7:60:85:e3:f6:ec:dd:86:48:ec:1c:bf:5d:3b:dc:f7:
89:c5:fd:22:fc:a9:1a:1d:0c:cd:49:da:57:26:e6:27:c4:21:
27:6c:f1:0f:80:80:9f:32:67:25:f7:a9:65:98:43:5e:2b:e4:
15:d4:a3:32:c4:fe:f7:ed:b2:6b:ea:83:4f:30:b0:60:5b:4d:
22:93:e1:aa:3a:24:25:6a:9b:ad:80:c4:8b:b8:95:1a:ca:93:
4b:cf:b5:12:44:dc:5c:f2:66:4b:ed:73:67:92:98:74:84:fd:
cb:aa:18:d2:90:62:70:b5:86:95:2e:01:09:7c:34:1c:74:56:
b1:a2:79:d6:16:0c:66:59:fd:d4:34:1c:d5:f2:51:98:38:21:
fc:d2:a5:5d:db:13:f3:2c:88:94:16:9e:57:12:87:77:9f:8f:
1f:79:09:f6:bf:18:44:94:4f:f1:f6:6e:f9:3b:f9:3b:54:75:
86:a0:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net