Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8551266c-ef98-4dd7-801f-d816ee2eeade.roa
File: 8551266c-ef98-4dd7-801f-d816ee2eeade.roa (raw, json)
Hash identifier: EcJvcMGymnPya5cKRiscbAXK42M7GsreI5Edc5v7y6k=
Subject key identifier: FD:B6:72:89:BA:12:8B:8D:CE:80:FA:70:D4:71:E1:F1:A7:60:88:DA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 226D09683BF52CE0A83F2E080334C442DA16BEE6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8551266c-ef98-4dd7-801f-d816ee2eeade.roa
Signing time: Mon 31 Mar 2025 21:30:42 +0000
ROA not before: Mon 31 Mar 2025 21:30:42 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:6d:09:68:3b:f5:2c:e0:a8:3f:2e:08:03:34:c4:42:da:16:be:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:42 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=ebcd30918d3c79ae83526afd849b26a7527e9849d07a4cdde6abad304b5d2d63, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:90:b0:0c:9f:cf:da:bd:06:b7:b7:6d:fd:
25:0f:6f:79:1d:6b:48:23:88:04:97:45:2c:08:53:
16:26:73:b0:95:3d:fb:31:d5:bc:5e:39:8f:a3:c2:
a2:8e:00:32:35:f2:f4:0d:39:c6:c8:be:cf:48:e8:
75:bc:64:a2:0f:36:8e:8d:b0:f1:8c:41:0f:b4:ef:
71:92:ad:7f:77:e2:44:6a:88:7c:84:6e:a8:1b:f5:
7a:b7:63:c4:22:4c:ed:e1:c5:aa:08:9c:86:66:91:
f1:32:7f:24:56:4d:71:bc:64:c1:97:ab:74:a2:3b:
a3:1d:36:37:1e:43:d4:fe:5d:ff:60:c9:6b:02:dc:
29:08:de:9d:18:c1:e5:39:6d:64:9e:06:eb:d6:53:
f9:a2:dc:22:ab:86:42:b1:9c:59:ae:8a:be:05:9c:
51:1b:58:62:eb:df:22:5f:34:93:bf:d5:d9:1a:60:
17:f5:8c:d4:73:62:75:2a:e7:81:12:bf:56:08:c6:
eb:f2:15:a5:b5:11:c5:61:f0:ea:74:c7:c9:f9:3a:
47:f2:c4:e7:c4:a5:9b:aa:8e:a4:f4:e2:e2:1e:0a:
f7:1f:16:c4:74:04:a8:88:4a:d7:7f:15:e9:9e:e0:
e9:a0:fc:d8:41:6a:1d:7a:cd:c8:e7:b7:58:29:d1:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:72:89:BA:12:8B:8D:CE:80:FA:70:D4:71:E1:F1:A7:60:88:DA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8551266c-ef98-4dd7-801f-d816ee2eeade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7f:e9:d3:f5:a5:d2:ac:8e:25:37:ab:a4:f4:bc:40:e3:64:9a:
09:65:66:5c:cf:86:c3:3b:55:70:9e:cd:32:de:81:a6:f2:b3:
23:ed:03:83:80:54:02:04:ff:de:ce:44:2f:42:69:d3:7a:46:
b2:fc:8d:ce:02:0d:46:0c:1e:dc:71:0b:a3:af:1a:36:62:31:
f2:ed:2f:e5:40:11:b2:43:fb:bf:fa:22:a4:c3:06:4f:21:a2:
57:3b:47:95:71:24:6f:4d:3d:a4:77:ba:72:aa:ce:44:46:54:
5e:92:4c:10:38:ad:2c:51:83:1c:d5:40:c3:94:02:ef:53:7e:
8d:c0:18:d7:bf:2e:7a:f3:88:1c:8f:61:5f:ec:ba:8b:97:46:
6b:8c:78:8a:7d:58:1b:dd:2a:90:b8:08:ab:f6:47:77:23:7e:
ed:6c:79:ac:66:66:75:cf:8c:23:2d:3d:73:79:3b:ef:de:6f:
52:9f:7e:14:a0:d9:1d:c1:ff:41:f3:3f:30:09:72:40:c0:37:
35:6c:37:76:ec:32:6a:63:0c:ca:e0:aa:2d:60:2f:e5:6e:28:
e1:14:c8:51:86:5d:a8:44:4f:26:d0:65:f8:c7:42:76:04:04:
97:13:78:cd:8d:dc:a8:99:84:b2:51:c3:cf:98:25:ab:ca:3c:
50:50:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net