Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2d10e7d-a784-476d-9df5-f7efeb55cf39.roa
File: a2d10e7d-a784-476d-9df5-f7efeb55cf39.roa (raw, json)
Hash identifier: GOfizn0xWN5v1af3tnGrOsi6t+m1PbjYiLXJQsxpU8w=
Subject key identifier: 6F:91:DC:BE:E8:F5:85:F6:57:B8:41:04:85:D0:D0:EF:1D:58:38:EC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 519276D608C64BFBCB37660F6B47F27A33A32AE0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2d10e7d-a784-476d-9df5-f7efeb55cf39.roa
Signing time: Fri 11 Apr 2025 00:50:14 +0000
ROA not before: Fri 11 Apr 2025 00:50:14 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:92:76:d6:08:c6:4b:fb:cb:37:66:0f:6b:47:f2:7a:33:a3:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:14 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=c2b1efb6489d1045106a7352b53e2f1fb63ec209c01d7cbbdefb5f33105e0f12, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:6a:1e:bb:98:99:a2:e7:10:ff:84:0e:b0:
0e:93:68:83:5c:07:83:cd:49:ee:9a:63:fe:0a:ba:
a2:2a:94:b3:43:5c:8b:be:0f:30:1d:2a:04:14:10:
e8:7f:27:21:c1:ee:3e:ce:63:73:1a:bd:37:64:bd:
46:2a:19:2d:53:83:1d:7a:6d:45:dc:8b:c0:96:d6:
7c:1c:e4:f8:5b:3e:6a:d2:71:8a:5f:c1:e7:f2:7a:
e9:a0:da:6f:0b:10:06:dd:c5:5c:73:4a:d3:a5:5e:
b0:b2:eb:89:b8:a2:3c:00:0c:13:3a:ae:f4:05:21:
58:b3:a2:c1:53:ea:e8:db:59:14:c2:b3:30:02:94:
60:69:24:28:e9:34:87:7d:a0:45:b3:3c:6c:6e:44:
f7:38:8c:fe:90:0f:28:35:db:33:46:21:ab:3e:ca:
36:c0:5b:94:cc:84:bd:f7:8e:6a:85:45:c5:8b:d0:
59:02:2d:6e:f3:21:ba:ee:2a:c5:44:43:d0:e6:bc:
26:a0:89:76:12:38:8c:46:38:36:5a:34:b3:31:81:
dd:f7:eb:38:7a:c3:6a:c8:57:9f:ca:50:02:80:f2:
16:1f:1f:85:6f:56:03:66:a7:5c:3a:51:ac:9d:21:
ff:86:de:ae:26:fd:23:dc:34:a6:17:aa:e2:a7:ad:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:91:DC:BE:E8:F5:85:F6:57:B8:41:04:85:D0:D0:EF:1D:58:38:EC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2d10e7d-a784-476d-9df5-f7efeb55cf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
73:65:bf:c0:9f:9b:c1:a5:de:d4:97:82:0d:d0:d5:10:93:7f:
f3:95:28:90:6a:f9:f2:1d:b5:d7:c5:31:7e:75:64:56:61:7d:
52:44:5c:37:12:16:d8:27:23:39:86:e2:eb:70:ea:4c:ce:a2:
77:00:d5:d2:5d:ba:81:9a:31:d5:21:68:88:9c:9e:a7:d1:b2:
a7:dd:4e:66:57:20:38:e0:92:b7:9f:1f:9f:d2:7b:f2:88:3c:
a2:ff:f9:31:87:54:a7:69:04:05:75:91:0e:fd:a0:d4:f0:c2:
86:23:1b:42:6b:71:ed:f6:d0:0d:39:d1:3a:8a:77:e9:64:d5:
55:15:f5:32:4a:08:f4:5e:33:74:fb:94:eb:14:4d:51:8a:5a:
23:de:e2:a7:51:aa:ac:13:c4:e3:3d:40:fc:0d:e7:0e:17:ca:
7e:d2:d6:9c:20:44:68:1e:27:b7:ac:d8:87:3f:50:a2:7b:28:
a5:cf:ce:de:41:62:03:c1:be:eb:b3:06:da:17:22:f7:8a:ef:
fb:e3:2c:25:25:ff:5c:a0:2f:eb:32:ad:41:f7:73:06:7c:aa:
e1:b6:3e:a1:0a:2b:01:d7:e4:9e:0e:33:e8:dd:6e:9f:0f:34:
84:09:a6:7f:d0:46:3a:41:ea:a9:ab:46:5b:23:4d:a4:db:2f:
63:5b:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net