Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
File: 993731a0-abe8-41b9-bad3-ce7852d4f117.roa (raw, json)
Hash identifier: S9adgR4iRIBhgCVjaO/ssw/Xrd0T5+b9oomLYnldhK8=
Subject key identifier: B7:95:B6:4D:8D:36:A8:A7:5B:C8:4E:30:FB:7E:DE:DD:B3:C3:59:E0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 62A1BA4913359E9C216A1302C05EE2E44125D857
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
Signing time: Mon 31 Mar 2025 21:31:12 +0000
ROA not before: Mon 31 Mar 2025 21:31:12 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.34.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a1:ba:49:13:35:9e:9c:21:6a:13:02:c0:5e:e2:e4:41:25:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:31:12 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=a809c15edce1c081011ba7c048180039a115be9d51a060d5c3f691d9dbe7b6b2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:4c:4d:99:79:43:99:eb:67:24:7f:ca:5e:
70:0a:ae:18:b7:21:b0:1a:44:32:e7:60:e1:bb:79:
d1:76:5c:a4:ce:b2:39:4e:8d:2d:8f:7d:d7:50:7f:
d7:8c:43:20:0f:20:e6:65:6d:5d:74:07:f6:cc:c1:
4f:10:70:34:74:c5:ae:b7:96:9a:ba:5d:55:c4:3d:
86:2b:64:ec:72:72:47:cd:63:46:6c:9e:00:fa:82:
14:22:07:f5:9a:34:15:19:1a:68:6d:9a:e3:bf:9e:
a4:f0:83:87:93:3d:17:93:f2:10:f3:59:75:18:7c:
ec:77:7b:8f:15:4f:74:02:40:7d:78:e6:8f:ba:8e:
8d:33:f3:80:3e:8e:6d:30:e9:3e:53:e5:ce:89:dc:
89:74:f9:63:f6:57:15:5e:8f:ef:25:15:d4:a0:cc:
e4:5d:e5:5c:e6:19:80:44:4c:79:f4:d9:4f:f1:55:
c6:ee:85:40:94:1f:2f:c3:2a:00:e4:bf:78:14:08:
6e:c2:31:92:91:65:62:e7:ef:a0:ac:50:b3:6d:13:
19:c8:61:29:e6:68:9c:3e:30:a7:92:fb:7a:2b:ce:
22:85:7f:31:55:b4:91:42:a0:ed:af:90:b0:5c:48:
43:29:f3:bf:e1:84:99:ce:66:d3:76:1c:44:8d:c1:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:B6:4D:8D:36:A8:A7:5B:C8:4E:30:FB:7E:DE:DD:B3:C3:59:E0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/993731a0-abe8-41b9-bad3-ce7852d4f117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
84:d5:c6:73:03:54:60:d3:04:10:8d:aa:1d:d0:a0:d9:0b:2c:
7c:f7:e3:89:f0:71:2d:38:41:58:26:f0:65:96:b5:51:6d:bc:
29:f6:5f:71:14:f1:59:a1:4f:59:b7:30:c6:5a:a6:04:e3:8c:
78:23:7d:37:37:82:fb:6f:3a:fe:a2:ee:60:7f:b4:bc:fe:60:
e7:60:da:4a:0c:47:cb:bb:64:97:0a:af:85:ee:27:e4:b5:d4:
61:30:04:3f:69:06:29:7e:f6:f1:76:83:ed:10:07:10:59:62:
96:33:85:b3:0e:f7:5f:25:33:ff:1f:6d:ed:28:88:2f:0f:e8:
ff:ca:33:45:4a:4d:3b:42:0b:20:d9:ad:15:47:13:58:ae:59:
ae:ef:9e:5c:f5:87:4b:f1:6c:54:b5:a1:92:c1:73:88:99:a1:
ea:76:69:6e:7f:e1:92:c5:76:a7:0e:23:0f:60:1b:04:a3:6b:
7c:c5:74:3a:0c:cb:25:cb:6f:56:e4:7e:f9:a2:a7:22:21:60:
9e:b7:24:bd:c1:7c:5f:b9:a0:3b:40:a4:a5:c4:86:8a:b7:50:
10:3e:4d:50:21:ba:4e:c8:36:7b:50:47:bd:52:d9:a0:c5:2b:
56:41:ea:ed:8a:ac:17:1f:3a:27:a7:94:b8:b5:79:fb:00:0c:
70:a4:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net