Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
File: 83d64fad-2f6b-441a-9079-e9e60d149aec.roa (raw, json)
Hash identifier: EsM+C0tzRzdrKYT2NUf+fQ1y9cUQOKDFsF7yTDiVX5U=
Subject key identifier: 60:AD:2D:17:97:8D:53:DB:02:74:52:C6:54:C3:84:8D:49:15:EB:DA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0884658EC0DB4B4E1482707280D545DEF3807048
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
Signing time: Tue 01 Apr 2025 15:10:30 +0000
ROA not before: Tue 01 Apr 2025 15:10:30 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:84:65:8e:c0:db:4b:4e:14:82:70:72:80:d5:45:de:f3:80:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:30 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=0254b93e1a37c73930d5200c888021b43d3f08c9dc216b7d914f8828dd4c7f81, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:c4:21:1a:68:bd:04:13:c2:f0:30:74:41:
f5:92:9c:af:ff:7d:f5:d3:0c:71:d6:e5:3f:21:c6:
93:6f:94:c9:4c:ab:4e:88:7c:7a:85:f3:11:ce:9f:
35:dd:b9:05:86:e4:0d:40:dd:27:9e:f5:59:86:52:
f4:a5:28:0d:6e:9b:ed:49:75:20:ea:48:c5:67:34:
8f:bb:8c:1f:8c:ef:95:ca:4c:9f:70:53:60:89:0f:
53:f4:dd:9d:0c:27:be:af:d8:4a:1b:d2:98:1b:04:
06:74:b0:6b:7b:28:76:9f:a1:e6:54:bb:0f:b8:dc:
1b:15:a5:83:09:97:19:fb:f9:d4:e7:87:27:5e:59:
a4:ec:f7:55:e5:32:dc:d1:dc:95:79:e6:7d:5b:27:
db:3b:e6:fa:43:6a:03:b3:82:01:b4:48:3a:58:11:
e4:7f:ba:b5:6a:46:1c:bc:a3:0f:a8:2a:29:1d:94:
c0:bc:d9:8e:4a:6e:cd:5a:34:9c:4f:aa:1e:3c:12:
bb:63:9e:1b:90:41:99:f1:ec:35:03:26:a9:51:14:
b8:f0:1d:23:de:3f:2d:be:ae:1c:95:f2:90:6b:da:
c9:73:6f:09:5a:bc:70:b8:ee:84:67:23:1a:73:b8:
9c:73:40:f4:1e:3b:02:48:4e:31:01:77:24:0a:fe:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AD:2D:17:97:8D:53:DB:02:74:52:C6:54:C3:84:8D:49:15:EB:DA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:06:39:5a:e2:cf:f1:ac:7e:76:44:cd:c4:db:2e:ef:a2:
14:ec:b5:8b:d2:c6:04:1d:d2:14:91:a9:f2:65:45:49:5f:7b:
df:1c:bf:c2:e4:8f:d2:49:76:ee:cb:6f:a6:71:43:b3:3c:f1:
02:8a:3e:f9:37:e2:f9:f2:5c:52:41:0e:14:35:0f:b5:6e:04:
83:ba:61:62:5b:b2:5e:3a:9b:2e:42:29:b4:d8:4f:19:d8:28:
92:4c:c9:4e:3d:57:38:d0:67:f5:18:24:94:de:bd:46:e9:54:
0a:fc:03:37:95:93:4b:08:4e:7d:b9:17:92:c7:04:9d:16:58:
31:16:de:c8:06:1d:00:60:d7:67:57:9e:ba:51:4e:6c:8a:29:
5b:48:f6:dc:87:fb:71:d3:c9:ef:36:2b:33:f3:73:b0:ad:1b:
88:5a:74:a7:7f:f9:a2:e2:5e:d2:cf:34:60:76:fe:a2:c6:23:
d1:f4:35:e8:da:0e:5e:2e:fd:1d:0a:35:eb:98:cd:d0:33:33:
86:a4:d2:b0:30:aa:bc:50:7c:ff:38:d4:92:f7:5f:53:26:06:
7a:13:3f:c5:c2:95:de:14:a7:fb:05:1c:0e:85:cb:05:e5:5f:
5f:a7:a9:74:46:c0:b2:10:3a:89:20:9b:10:1f:e5:e1:7f:8f:
ad:db:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net