Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
File: 8d2d588e-ac05-4633-acba-4d5705f7071e.roa (raw, json)
Hash identifier: omizkGCR9+Y0mZL3UluRHE6a9vu1cJUaOy98xKYeoWI=
Subject key identifier: 2D:F1:44:7E:8F:EF:2B:34:F5:D3:C3:F6:7D:7D:21:0F:00:31:F9:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 68466E6C9ED762F6009A66831AC0D5C47ED45755
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
Signing time: Mon 31 Mar 2025 21:30:44 +0000
ROA not before: Mon 31 Mar 2025 21:30:44 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:46:6e:6c:9e:d7:62:f6:00:9a:66:83:1a:c0:d5:c4:7e:d4:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:44 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=8d779ac2b18b108c84a0bb0e91230f9522e67f9caf438a58e5eee0582ec4237b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:46:1b:41:fb:1d:9b:51:8f:1a:f5:99:52:
4b:d0:c3:77:32:7f:74:d6:72:7a:83:f5:69:a7:4c:
df:3f:51:32:db:74:5e:63:2f:6b:31:18:0b:11:98:
22:5d:a4:2e:9b:8a:25:89:d8:94:7d:7b:75:6d:45:
b5:c4:f7:24:f2:c6:90:af:52:51:8a:f4:3d:f8:82:
c8:80:aa:62:b0:73:e9:48:a2:c9:54:7f:79:71:89:
98:96:20:7b:54:8d:f8:5e:9a:41:35:5b:67:7b:2e:
41:77:4e:58:4f:9e:94:06:f1:2d:b0:b6:8a:34:ee:
32:89:9b:e5:76:9d:b1:79:86:7a:54:97:3c:a1:dc:
c8:1c:c0:dc:a5:1c:fa:8f:f0:87:b1:58:83:6b:7e:
8f:ef:38:cf:30:f7:ef:90:f3:9f:55:85:18:0d:da:
25:07:f3:fc:bb:5b:ae:27:4f:6d:8e:83:c4:10:7e:
06:13:89:98:56:66:e2:07:d2:44:8e:b2:07:25:4e:
2c:84:2b:db:2e:22:8a:5c:5d:1a:7c:06:c7:c6:e9:
15:85:71:a4:27:72:72:65:fa:c4:d9:93:88:7f:bf:
2a:f2:ad:20:d8:53:fc:15:f7:e4:24:01:5a:83:8c:
c9:d4:e1:63:bc:ca:35:62:e4:aa:7c:0d:68:73:1a:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:44:7E:8F:EF:2B:34:F5:D3:C3:F6:7D:7D:21:0F:00:31:F9:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
af:ad:82:3c:f1:cb:27:1e:53:55:67:a0:0c:8e:d8:91:b4:19:
e5:90:d4:b9:35:c7:21:49:72:74:90:65:1e:b4:97:b8:ea:1d:
52:44:d7:7e:02:85:05:f3:16:8c:cf:d4:89:9a:f6:7d:e1:c9:
47:cf:bb:5b:f9:3a:62:72:9a:96:1a:cd:8b:14:09:a9:68:49:
b2:c6:74:a3:ca:12:b1:38:91:21:b1:28:53:4d:1b:b1:e5:39:
1e:72:0a:64:6b:4e:cd:b9:27:23:72:eb:03:62:37:42:68:a2:
96:71:1a:ca:44:47:6e:4f:4b:8a:c2:d7:5b:66:5f:34:34:92:
e4:4e:dd:15:3c:ff:53:f5:ac:65:69:61:de:2e:78:c9:33:2b:
2e:53:b9:4a:67:5c:3e:43:e9:28:d4:be:c3:3d:55:00:14:cc:
09:57:71:59:27:d3:89:33:d0:8d:fa:3b:5f:b2:f2:5f:54:2c:
13:f4:e3:54:e1:46:fd:7c:fb:df:fb:ad:16:c5:fe:8c:ef:d1:
97:d9:e7:8e:b2:54:04:df:2d:fe:44:c2:cd:93:27:15:af:fd:
46:93:ad:07:18:04:2d:73:a7:2b:a7:18:01:71:a5:85:ab:39:
72:4d:9d:cf:87:37:6b:a8:a3:76:4c:0b:29:19:d5:2a:d0:d7:
c0:be:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net