Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
File: 83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa (raw, json)
Hash identifier: wd2rrLvVYpLPQmptTU6waMjsxHF1K3SmPQnT3/HhV/8=
Subject key identifier: A1:76:04:B0:1D:47:B6:C8:4A:FA:B6:25:FC:C0:1E:AB:C4:12:E0:F1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 45440119A6B5EB12EBA02E8E9237508E2395DA2C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
Signing time: Mon 31 Mar 2025 21:30:34 +0000
ROA not before: Mon 31 Mar 2025 21:30:34 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:44:01:19:a6:b5:eb:12:eb:a0:2e:8e:92:37:50:8e:23:95:da:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:34 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=6af6ad3b6a91ae7ec57f5cd22732382e290fa770b4294fc5bff215ff52f20a80, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:a5:6d:b3:c7:32:38:69:e7:e1:7c:fd:f0:
4d:4e:37:29:b2:9e:d6:1c:c4:29:99:40:d0:eb:29:
95:fe:bc:6b:89:dc:39:92:d1:b2:c0:06:90:ef:89:
e7:67:fb:4e:0f:c5:34:d2:99:26:28:7e:f8:44:e2:
37:cb:32:72:c1:81:30:33:71:a8:81:b4:77:ba:19:
1b:90:a0:a9:24:76:a8:06:07:de:1a:cd:62:f1:b8:
0b:cd:77:3f:3f:34:f3:f2:d9:11:20:21:e0:89:91:
98:e1:c4:21:82:dc:c3:10:9f:40:70:ab:51:50:3d:
d0:0d:e7:7a:41:07:4d:88:de:e1:37:00:d3:87:30:
2e:03:95:bb:2e:a8:91:a7:29:a6:bb:f6:ba:6b:24:
88:43:5e:b0:bb:af:1f:57:53:cd:c0:18:98:26:68:
fb:4a:39:13:2b:11:e8:1e:7d:28:a6:a0:27:4c:50:
62:76:96:73:1c:01:8a:87:6f:4c:77:e1:3f:bb:f0:
07:f2:6c:3e:73:d6:54:bd:3f:70:7a:57:74:f6:48:
1a:0e:7a:3e:f2:d0:ed:ab:65:47:c7:99:bb:dc:08:
d5:fd:37:fd:b6:47:7b:32:00:1f:81:9d:70:0c:8a:
19:65:89:e8:b0:8d:e1:58:1a:b0:8b:c1:d9:96:53:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:04:B0:1D:47:B6:C8:4A:FA:B6:25:FC:C0:1E:AB:C4:12:E0:F1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:5f:48:9d:1e:04:8a:98:18:2d:50:1d:e0:69:36:d2:b7:7f:
0f:56:ed:4c:7e:67:3a:15:81:5b:3d:bc:1f:7c:8d:2d:db:de:
fa:16:29:a7:e3:37:2d:84:d8:3a:ba:07:8d:08:25:d7:3d:02:
8e:06:7b:75:c5:33:fe:70:e9:42:25:d1:8e:5f:7d:97:07:a2:
fb:b7:34:52:06:f1:e0:5e:5e:99:9b:76:5a:12:90:01:3c:f8:
62:50:d8:7f:0f:3e:8c:2d:6c:9e:a3:07:4d:14:a8:00:a1:c4:
45:bf:d3:94:15:e5:22:92:80:09:5f:7b:26:08:38:14:e9:8c:
4c:8d:09:40:2e:4f:c5:94:7d:81:11:1e:6b:fd:f8:d5:24:9d:
91:4b:02:79:4a:5b:18:40:96:5d:79:cb:46:44:8e:4a:7a:8d:
2e:44:60:fc:28:24:1f:1b:8e:2a:4b:70:e9:c0:e5:35:ca:39:
34:21:79:aa:b2:fe:f0:44:3d:a8:06:22:df:6b:8e:b4:22:44:
f4:ab:80:02:88:ac:a9:f9:20:13:f7:ae:84:d4:75:c5:d6:4b:
5c:a1:b6:4f:b1:03:ec:8c:aa:13:61:70:56:7b:8b:e1:e4:8d:
9c:c6:e9:02:00:00:5f:6a:81:88:cb:e4:2a:07:10:e0:da:40:
f0:3f:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net