Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
File: ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa (raw, json)
Hash identifier: JJ5vyIt4m0Wsrl2Wl4Fpg8gzi5whsXezbQZEj5pSTQY=
Subject key identifier: 4A:2D:66:23:B3:6F:31:D5:AE:91:F5:95:2D:15:19:79:EF:0E:AB:26
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 53D9C15C44D1D03079CB841AE5E601250C2C9463
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
Signing time: Fri 11 Apr 2025 00:50:41 +0000
ROA not before: Fri 11 Apr 2025 00:50:41 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d9:c1:5c:44:d1:d0:30:79:cb:84:1a:e5:e6:01:25:0c:2c:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:41 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=c3de906c60bbfe7d16450054cd5304c68edae2908dffc28be5b49cb90661467d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:77:24:07:28:36:9d:48:de:94:97:64:50:
59:f0:7b:a8:7c:9d:5b:c4:88:b6:77:2e:87:37:6b:
b4:32:c2:f7:94:80:13:ab:16:83:b8:24:9e:34:f2:
2f:26:a0:de:d5:7b:ad:c6:bb:c5:ad:8e:37:c5:0d:
a1:ca:da:c4:83:41:3c:ae:20:d3:fd:0d:81:6d:f0:
07:f7:28:03:6d:1e:bd:da:56:0e:87:78:09:80:1a:
6c:2e:26:67:dd:ec:69:17:6f:2d:74:a9:15:a7:7b:
6d:9f:4a:92:93:a9:f3:64:9e:b5:e8:84:eb:8e:48:
b4:ec:36:8b:31:48:69:a1:c9:ae:f9:e9:a8:76:fd:
6e:ab:f4:6c:3e:4b:2d:02:59:b2:ce:b0:c7:68:45:
fd:f7:41:93:c2:9e:52:1f:0b:3a:29:59:fd:6a:00:
0f:6e:d2:33:07:58:69:19:24:d1:84:5f:1e:14:28:
f4:87:d2:db:6c:e7:ca:7d:aa:23:22:aa:d7:91:2c:
ae:68:12:98:ec:17:8f:60:9e:41:83:05:21:31:17:
51:79:94:ec:46:cc:0d:b2:33:ff:42:50:c0:23:09:
6d:06:fc:80:d6:8e:79:95:cd:bd:5a:dd:65:05:7f:
48:ba:53:de:77:8d:5d:0d:9b:b7:7b:41:1c:ad:2d:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:66:23:B3:6F:31:D5:AE:91:F5:95:2D:15:19:79:EF:0E:AB:26
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
05:1c:59:79:00:ff:42:e8:cb:0a:6c:f8:f7:39:50:30:fa:38:
51:1c:ae:e8:4c:22:cf:8f:f7:31:b4:29:5d:98:c5:d9:cf:58:
c1:31:c6:23:02:d1:85:3f:9b:31:6c:cc:6e:1c:6d:7d:0f:d5:
35:4a:27:42:bb:90:e3:c6:c7:44:3a:92:e4:fd:67:40:b2:a6:
38:01:b7:2e:f0:78:c1:8e:f9:c9:7a:75:2f:d8:17:ac:5c:ca:
78:30:f3:2e:67:45:6d:c6:e3:25:2f:f4:83:66:67:c1:67:d4:
22:f5:63:0a:82:88:0f:c9:c6:8f:0c:d0:48:31:46:b1:e6:e9:
69:a0:57:83:95:bd:20:be:d7:a3:ee:a1:d0:a1:c7:d5:22:95:
2b:17:c5:ff:99:ad:11:48:b0:d2:34:f3:18:cc:3d:ca:8f:c4:
42:e7:50:73:89:4c:21:cf:2b:35:d7:c3:2d:bf:3b:97:02:cf:
25:96:16:5e:95:c0:52:ca:15:e8:b4:60:52:3c:6c:9a:9c:e0:
c8:ef:4a:0c:af:4b:62:2f:c6:fc:73:6c:61:db:a7:5b:28:d7:
48:75:64:a5:ca:4b:14:2a:e8:c5:45:ea:33:42:2f:30:56:f3:
0a:79:3b:a2:09:85:68:55:a8:14:b7:2a:84:43:c3:62:94:50:
79:8c:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net