Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
File: bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa (raw, json)
Hash identifier: flyec24vimwJDJJrJRGx4tw2mKrjqekdWCZjP0BIiFE=
Subject key identifier: 12:E0:80:07:C1:99:E7:C0:AC:EA:01:A8:B5:B8:91:56:3E:F9:73:0B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3CB1914F9F3EB22A6F4BE12FB6EEDE66079A08BC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
Signing time: Fri 11 Apr 2025 00:50:42 +0000
ROA not before: Fri 11 Apr 2025 00:50:42 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b1:91:4f:9f:3e:b2:2a:6f:4b:e1:2f:b6:ee:de:66:07:9a:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:42 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=8e770af13840b04102fac1d14fddeea0f82738b698af26c5fef900f79f1e40b2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:b1:f8:19:b2:25:7a:8b:3e:ea:66:c8:bd:
25:f8:ca:bc:5e:ac:04:63:a4:8d:6f:e4:80:37:eb:
18:bb:5a:87:e5:9e:a3:87:08:29:cd:f5:b8:a3:88:
af:f1:b7:e8:8b:be:d5:25:64:a6:5e:fa:5b:19:4d:
08:69:0a:41:90:86:02:6c:ca:43:11:f6:41:30:ae:
56:3e:4f:6a:9e:b5:f5:c4:2d:d7:51:be:0b:1b:ea:
3a:b3:ee:f4:e3:66:31:aa:11:bf:5c:bf:2d:26:f2:
76:93:b5:63:38:b3:21:52:12:60:55:aa:f5:56:0f:
4c:c5:4c:51:26:07:09:8c:2b:a4:89:5c:40:e3:8f:
5e:01:72:5d:25:58:c9:64:cf:0e:11:43:cc:b9:8b:
33:45:f0:77:6e:31:6e:3e:27:f6:0b:e3:b6:f6:3a:
e6:bc:f2:b6:88:8d:a5:ec:5b:a3:27:32:2b:8c:64:
1b:ee:74:32:d2:09:81:92:a2:56:ef:99:7d:a8:ce:
42:20:c1:95:70:bc:2f:a6:e7:a2:08:4a:6e:87:45:
c9:b3:87:9d:b4:47:35:86:96:d0:4b:4b:f2:5b:40:
19:a4:f2:bb:9d:41:f3:42:ff:c4:41:b6:75:c6:20:
84:62:2f:ed:8e:e0:ba:43:b1:bf:df:26:7b:af:ab:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:80:07:C1:99:E7:C0:AC:EA:01:A8:B5:B8:91:56:3E:F9:73:0B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
38:8b:a6:d0:bf:d1:8e:4d:ab:31:b2:6f:18:07:6e:95:b8:c7:
13:8e:df:b8:5e:71:bf:db:f8:2f:00:79:08:11:06:58:39:40:
65:88:51:d6:79:96:7a:96:3d:dc:09:09:84:e1:3e:b6:60:da:
ac:02:a8:0e:fd:39:2b:b6:9b:92:0e:a2:eb:48:d6:19:f5:c9:
9c:08:3d:26:7f:d7:ba:7d:24:8f:52:d7:c8:d1:a2:d0:0d:3b:
56:0d:5a:b8:85:f9:93:6f:f6:1c:a2:3a:61:63:c6:f5:75:43:
ad:3b:50:d5:20:5c:ff:fe:f8:49:0e:a0:67:e4:00:07:89:6a:
53:f3:49:34:83:15:c2:33:5f:28:76:92:e1:71:fc:4d:c6:03:
fa:03:85:29:e6:6c:56:31:97:9f:74:ef:35:66:fb:2f:bc:9d:
53:ae:fa:32:4a:00:39:33:0c:c1:1b:7c:38:62:0a:f1:e6:fb:
bd:7e:ae:ac:21:de:ae:49:d6:4c:39:34:61:4e:ed:33:0d:89:
73:0b:ef:6f:69:bb:74:19:80:eb:1a:72:55:52:ae:a9:01:40:
c9:12:c2:b1:32:46:a6:ea:ab:a5:34:1b:a4:d4:03:b5:bc:23:
c3:29:cd:03:4e:2e:27:e0:72:85:d8:64:35:7a:5f:23:2d:72:
a6:42:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net