Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9e56510b-5f1c-47f6-8a54-2ef9c96c572c.roa
File: 9e56510b-5f1c-47f6-8a54-2ef9c96c572c.roa (raw, json)
Hash identifier: rt8JwwM/8mkAHgjvTwIRzSw/xdJwFkYA+EzC/LhwRyI=
Subject key identifier: 63:57:6F:6A:DC:1F:9A:9D:DB:B9:3C:37:02:F9:DE:77:44:92:CF:E4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6BB7D0E723D985F3AB3E3C507B0D560593AB9198
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9e56510b-5f1c-47f6-8a54-2ef9c96c572c.roa
Signing time: Fri 11 Apr 2025 00:50:22 +0000
ROA not before: Fri 11 Apr 2025 00:50:22 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b7:d0:e7:23:d9:85:f3:ab:3e:3c:50:7b:0d:56:05:93:ab:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:22 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=870e6304affab8af596ffe1004e98991af77d2f51f9bfee8f5d60888f8aa1045, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:21:ec:0d:a3:64:80:b7:d7:de:bd:f2:73:
d1:a1:4a:f3:5d:25:5c:46:45:dd:0e:85:28:4c:6d:
23:58:c6:96:82:23:67:2d:6b:9a:1a:f2:93:e7:4a:
7c:39:e4:59:57:c1:d1:ee:19:6d:be:13:38:96:9e:
cf:a0:6d:3a:56:44:f7:61:60:67:20:1d:38:17:f9:
d6:11:cb:97:b5:e5:e7:54:4d:ce:f6:f4:ff:9f:6c:
14:c3:a1:b3:88:4e:8f:bd:73:cc:2d:71:47:a6:a4:
91:ce:2c:5a:c6:a8:cc:1a:38:9f:d2:87:7f:25:fd:
78:cd:f6:8c:0d:73:e5:c0:ba:6e:fe:ab:58:9d:5c:
89:73:da:51:20:4d:87:57:8d:fe:62:08:cf:a1:b1:
70:9e:e8:b1:64:61:eb:17:31:2c:2d:a2:7a:78:7b:
1b:3a:c4:f5:66:00:74:8d:27:cd:cc:7c:c2:20:47:
1a:40:11:3f:62:f6:40:0c:86:cd:97:83:4e:f3:eb:
58:f7:f2:c1:3e:f8:a1:cf:34:e6:36:6d:57:6f:a0:
67:5a:cd:df:5f:0e:68:7e:dc:d9:a0:bc:a1:8f:95:
7a:c1:b2:e7:fe:eb:46:50:d6:6c:96:6d:44:19:0c:
fa:14:33:c1:0a:23:c4:f9:93:15:90:4a:47:a8:c1:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:6F:6A:DC:1F:9A:9D:DB:B9:3C:37:02:F9:DE:77:44:92:CF:E4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9e56510b-5f1c-47f6-8a54-2ef9c96c572c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:80:53:ed:48:16:b2:79:b5:62:b0:e3:d9:78:1c:9b:d1:21:
97:d7:4d:c3:c2:16:37:02:c0:0e:73:33:c7:a4:3a:ea:2c:e7:
0b:7b:89:9f:d5:19:8c:85:a1:11:f7:70:ef:eb:77:40:72:74:
6f:dd:fa:8d:f5:bf:98:75:20:80:74:e3:33:4e:1f:4a:a4:1c:
2c:65:db:94:43:2e:9f:c3:9f:58:42:9e:6c:26:70:28:11:a5:
3d:e0:3b:b6:55:d6:9d:13:a4:d2:70:27:8b:d9:80:7e:2d:b8:
32:84:b5:b9:af:8a:33:9f:77:53:62:bd:25:e9:09:6e:be:c7:
76:21:48:88:a5:d3:31:38:0f:c9:b3:6c:10:7f:ca:62:eb:16:
23:5c:fd:02:eb:98:3f:b7:56:1f:85:06:eb:2c:8f:b5:ac:f7:
50:85:e1:e7:77:5c:b8:a3:8d:8d:7a:17:53:e9:0a:01:01:53:
ea:07:70:fe:43:75:0e:a9:6c:04:95:07:f2:52:ca:28:c6:33:
85:81:3d:2d:61:0c:69:62:ab:50:2f:2f:25:91:3d:52:2d:12:
eb:68:f8:e3:af:02:0d:42:0e:2a:20:53:2a:6a:28:7c:29:74:
44:e5:8d:b0:79:58:99:2c:4d:25:39:c7:5a:d8:50:a0:2b:d5:
88:22:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net