Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
File: a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa (raw, json)
Hash identifier: Q0zLmWjfKNT57Xbqn8HX03m/ArmWJMyVoAfBqz9HcIc=
Subject key identifier: DD:C2:97:64:BE:03:3E:2F:6A:69:A2:78:97:CD:C7:1A:BE:1E:D3:75
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 55E7EA13005F9561BCD1075D893F04891575BBB8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
Signing time: Mon 31 Mar 2025 21:20:12 +0000
ROA not before: Mon 31 Mar 2025 21:20:12 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.202.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e7:ea:13:00:5f:95:61:bc:d1:07:5d:89:3f:04:89:15:75:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:20:12 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=3a931076740f183ab572de090636e4577e314d0aa3b02bc179ab70c2fee4554b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:40:ce:76:aa:be:28:3b:f0:18:c5:26:06:
7a:5d:80:8f:a1:47:ca:dd:d5:13:09:85:63:cb:c6:
c4:a6:74:fd:38:87:2c:ca:02:6b:fd:ed:72:9a:43:
76:08:ed:81:29:49:64:6d:f0:41:4c:05:ec:c7:f8:
0d:31:f2:3f:07:36:6e:8c:2a:20:23:87:b3:7d:71:
b8:6e:60:69:06:7a:01:05:b4:47:47:4e:19:ec:b3:
b1:a5:fd:b8:7d:f1:40:05:95:35:a9:b2:ed:7d:05:
9f:03:e2:df:1d:32:1d:b7:99:b6:a4:fc:a4:db:46:
34:37:6e:ae:b8:6c:b0:92:2c:4e:9a:65:e9:ab:b6:
87:9c:75:09:32:55:12:d1:de:e0:2b:10:a4:4f:fe:
b7:ba:9c:54:f0:1b:a5:2d:9f:ec:e8:6d:c0:9d:ab:
51:65:6f:ac:a6:9d:46:e3:67:41:cc:63:bc:93:9c:
31:d2:df:1f:ae:50:b8:10:60:af:1d:3c:89:87:42:
73:cc:3d:5d:32:18:ae:31:8f:13:49:99:34:49:88:
32:26:a0:73:6d:b8:e1:24:33:78:d0:1b:4b:04:28:
06:d8:4a:f9:9f:58:a6:ad:e0:26:2c:c8:83:7a:77:
20:72:f4:47:2b:2c:09:37:9d:bd:69:ba:20:c6:45:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:97:64:BE:03:3E:2F:6A:69:A2:78:97:CD:C7:1A:BE:1E:D3:75
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
65:be:3c:8a:7c:53:75:13:56:20:08:f5:da:45:10:b0:1d:70:
3f:39:32:d5:07:cd:c2:21:b5:cb:3b:2d:b7:97:48:ca:ee:2f:
d0:72:39:f5:fd:1b:b1:2b:b6:d4:7b:d1:4f:62:44:ca:7f:79:
1a:19:5a:5c:a7:fb:84:58:f2:8a:6f:71:3a:49:75:e3:7e:c9:
22:08:e2:dc:e0:68:da:c3:3c:6b:55:6e:06:65:7e:3d:31:bc:
25:ef:ac:39:aa:0a:a3:30:f8:0b:22:eb:01:b5:35:6e:96:a4:
5d:cc:a8:ca:85:b7:a0:86:8d:d6:de:99:14:6c:37:0d:b8:99:
a2:be:81:23:e0:87:8f:b3:bb:87:79:e9:ed:3c:c6:80:25:76:
0c:cc:5a:ff:78:b7:c5:67:1a:b8:27:08:db:55:3c:88:b0:ca:
7e:25:98:da:38:cf:29:20:8a:bc:d7:05:92:73:8f:89:13:dc:
be:ec:e7:a4:d8:e2:ea:42:90:47:30:70:af:f2:13:a7:d8:21:
31:64:53:78:35:67:de:de:de:27:08:f3:30:14:36:10:1c:6d:
40:e2:6d:dc:ba:8b:13:4b:95:1b:14:ff:33:e1:6d:b4:a6:0e:
08:28:0d:0f:33:a9:d6:f5:06:8f:7d:c5:1e:9e:da:a9:97:5b:
fc:ef:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net