Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa
File: 9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa (raw, json)
Hash identifier: IB4MDeOuv94iC7arZMSChKVgGylIXh+cLffEcWP0DBM=
Subject key identifier: DB:18:0D:A5:2F:0B:A0:7A:7E:E4:83:43:25:77:A1:78:E7:A5:B1:E7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1D1F116CC70715A67841B0A0A9D47B53955A598E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa
Signing time: Mon 31 Mar 2025 21:30:33 +0000
ROA not before: Mon 31 Mar 2025 21:30:33 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1f:11:6c:c7:07:15:a6:78:41:b0:a0:a9:d4:7b:53:95:5a:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:33 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=93960bbc1afdf45b879ed2d725c8b37bd0bd55f7ecf6031f4fc4f3961a8602d2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:ef:c0:5c:5f:b4:6b:47:82:ef:c7:8c:f2:
aa:bd:d0:9b:ac:29:b6:65:d2:b5:19:dc:97:53:58:
3e:ec:0f:09:11:51:72:5f:8a:eb:21:e3:27:48:2d:
19:ae:51:21:5d:9c:12:20:e6:32:8a:03:bd:d4:ae:
5e:4a:8a:21:cd:ab:80:5a:20:30:cc:7e:ba:fc:3d:
50:e3:3f:9a:88:eb:88:3f:5a:67:94:09:56:df:c5:
cc:4c:f4:a4:e5:d3:ae:0b:9f:3e:8c:7b:c6:ba:a0:
b4:09:9b:7e:da:c5:0c:39:fd:e1:86:4a:5a:91:b9:
0a:40:ce:bc:2d:4c:e4:48:72:bb:e2:26:20:aa:b6:
ac:fb:90:24:f6:b5:ca:c5:27:27:2f:aa:29:cf:04:
86:d7:64:78:f4:96:38:fd:85:4e:ec:0b:7a:27:5a:
b1:c9:7e:ec:e0:ff:70:91:d2:64:25:08:2f:7b:19:
81:4f:04:d1:c7:99:e4:10:62:f6:e3:3e:b1:50:df:
4a:6e:24:b7:f7:ec:d8:2e:87:8a:b8:f6:09:43:e1:
60:8c:52:fc:8e:ca:2a:c3:bf:43:1e:b3:3e:46:8f:
fb:82:c3:7f:59:b6:0a:df:2a:4b:b9:b4:04:9f:93:
c4:02:cc:37:cb:9a:f1:cb:c8:21:44:88:7a:48:0e:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:0D:A5:2F:0B:A0:7A:7E:E4:83:43:25:77:A1:78:E7:A5:B1:E7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:03:4e:b1:40:c7:80:ea:99:ca:ea:52:65:e8:54:2a:40:40:
82:9c:01:f4:4b:ba:1c:9c:f5:90:aa:17:80:46:1c:19:c5:68:
57:c0:6c:04:53:84:83:8c:29:ef:7f:38:9b:a6:7c:5c:99:d0:
0d:5d:7a:3a:d9:60:c7:fb:09:97:ae:52:ad:67:63:e8:65:d4:
c3:ca:e8:21:16:1f:2e:f8:72:5b:cc:a5:e4:df:09:88:9b:55:
4d:41:89:6b:a5:cd:dd:db:7a:00:54:5c:76:bc:39:3b:75:63:
d1:8e:7f:07:a1:60:fa:05:12:46:50:ef:af:12:ac:c2:ce:a2:
83:a5:78:21:bb:27:1a:c7:23:d8:d9:00:37:c4:b9:74:75:80:
80:17:4d:fe:26:0a:3d:b9:ed:80:29:80:6a:48:ba:26:51:47:
83:05:44:04:77:fd:09:2d:5d:4a:f7:a7:5c:2e:2f:03:c2:72:
4f:bb:1c:ac:d1:50:04:c6:6b:66:de:1b:b0:3f:16:c1:f0:79:
c6:9a:31:e3:f1:1c:cf:c0:2c:7e:33:d3:7a:07:f9:0c:37:2d:
0c:54:a6:ed:78:7d:34:44:84:d1:48:c6:0f:e3:dd:a2:21:b2:
d7:8d:45:c1:3d:9d:e4:84:ee:1e:e2:f8:cc:04:0b:95:a5:55:
98:c6:e3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net