Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
File: 9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa (raw, json)
Hash identifier: kfH8ARBluwN/wXMQ2fiBvTscJA1EfSLk346CgYW/534=
Subject key identifier: 0B:A4:AF:71:AF:18:72:A5:9A:A4:29:42:3E:B2:D5:CE:B5:5C:B1:49
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20DE2F8D992D578C9AC8B080F6D7AD821040F8D7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
Signing time: Tue 01 Apr 2025 15:11:13 +0000
ROA not before: Tue 01 Apr 2025 15:11:13 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:de:2f:8d:99:2d:57:8c:9a:c8:b0:80:f6:d7:ad:82:10:40:f8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:13 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=bca8694b3723554f02dc1c65ec510a80179b6acc31e1b212600b85750954cff3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:3c:7a:66:4e:a5:86:95:a3:e3:ca:8b:c5:
4d:86:bb:c4:35:c7:25:42:f1:e4:a5:47:dc:49:75:
2a:15:18:fb:c0:0b:53:95:04:d5:a5:12:d5:20:ff:
09:20:28:c6:b7:98:7e:a1:2a:1b:d9:bd:fe:58:c5:
c2:8c:b4:41:ca:01:f1:ff:c6:b4:f7:a4:0c:c2:66:
f4:1d:7a:83:5c:fa:64:51:ba:92:35:92:a5:0d:ce:
81:3f:4a:fb:73:1f:6d:85:75:d1:a8:c3:7c:71:d8:
8a:e4:95:fa:11:d3:98:34:4e:a5:55:9c:66:cd:89:
bf:1a:f2:ff:bc:ee:a7:68:c1:fc:a3:a3:13:8a:97:
2d:f4:d7:16:36:f7:7a:5a:24:c1:c5:39:59:e6:d3:
4f:3d:59:39:ee:ad:bc:bc:26:1f:6f:f4:8b:46:72:
e9:18:92:87:03:30:de:be:33:1b:f7:3e:a1:6e:03:
c1:47:1c:8e:2e:84:3d:bb:8e:63:b8:20:13:aa:79:
5f:fa:3c:b2:80:96:1e:95:80:21:14:89:7f:95:0d:
a8:dd:9d:40:27:17:fb:18:b0:da:9c:55:c2:6d:b4:
8d:4b:ae:a2:41:b5:f1:21:ce:da:56:0a:f6:b5:fa:
67:0a:e7:63:91:6b:ee:9e:13:7a:c2:d1:9e:32:a7:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:AF:71:AF:18:72:A5:9A:A4:29:42:3E:B2:D5:CE:B5:5C:B1:49
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
6e:2c:cb:8b:3d:c7:84:9d:bd:57:f7:bb:91:24:c8:e1:de:4b:
81:f3:da:82:6e:e8:19:86:c5:40:2d:8b:68:dd:ed:78:0a:a5:
fb:cb:df:3e:df:eb:dc:12:24:82:3e:ff:f0:f4:de:17:3a:01:
de:28:e5:b0:6a:7d:48:48:80:93:27:73:17:82:e6:ab:d8:c4:
54:a0:27:11:cf:52:01:ef:ee:c7:92:a9:66:6c:25:73:6b:4c:
c7:80:41:cc:5e:25:bb:f9:9c:6d:d5:f4:58:e1:b2:9e:5b:6a:
69:9d:2e:32:54:99:83:89:aa:c9:85:0c:1b:e1:e8:2f:c1:80:
d8:93:2b:0a:37:27:e4:9d:38:c1:14:96:95:73:a7:b0:ec:da:
30:b1:85:80:c4:20:15:80:93:92:b9:f7:82:1b:e0:54:1e:b5:
cc:5f:3f:f4:b4:20:4c:9d:8c:70:39:f3:88:73:c5:bf:92:80:
5b:35:ec:7a:1d:eb:87:39:47:53:fc:f0:2c:8f:16:bb:78:be:
bb:4f:04:77:b8:2d:78:53:2f:ec:69:27:16:ae:84:db:aa:64:
26:cc:10:7d:f5:b2:71:6c:2c:81:08:c4:1f:f3:c8:2c:29:7a:
6b:04:23:30:81:bb:10:91:75:85:5e:7e:51:53:c3:73:cb:ff:
3a:21:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net