Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
File: d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa (raw, json)
Hash identifier: dYq/YAcDLZt3GK1ocAfva+HSUd+oIc9nxx8vQ33nza0=
Subject key identifier: 31:01:BA:33:7F:96:E1:1F:7B:19:C0:7F:BD:7F:F6:FB:4D:A0:CF:03
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 26D7934ED31E47969BA3938A5D143F2A7FA6A719
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
Signing time: Mon 31 Mar 2025 21:30:19 +0000
ROA not before: Mon 31 Mar 2025 21:30:19 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.110.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d7:93:4e:d3:1e:47:96:9b:a3:93:8a:5d:14:3f:2a:7f:a6:a7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:19 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=8d600b5447f4ac498cb4c33ab423f5e6a2bd2636fb62110e67d5160f06e08e59, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:9f:76:8b:45:d8:c1:ec:33:ec:8f:6e:37:
d6:a2:34:9b:7f:82:94:5b:f6:93:ca:48:1b:49:9e:
7d:1e:01:26:b8:30:30:51:a1:0f:60:30:f6:b3:12:
cd:5f:84:77:d3:2e:14:9a:5c:ae:d1:43:65:f4:a6:
cb:b3:1f:61:39:e2:f9:e2:b3:d4:0e:1d:eb:e3:12:
e2:9c:3c:a0:73:e8:86:a4:ad:67:1b:97:ac:20:47:
25:48:f7:e1:a8:b3:9b:e9:bd:9b:5e:5f:87:e0:1e:
b6:1e:17:50:e5:77:62:74:2d:f1:21:28:56:a6:84:
4d:5e:7d:05:64:23:c5:46:60:2a:12:90:bb:fb:f6:
6a:24:f5:a9:c5:e9:f9:93:7c:37:f0:6b:f0:54:6f:
75:02:a7:2d:cb:be:39:14:34:ce:5e:fe:7a:64:44:
18:88:c5:7e:47:db:b9:06:86:68:f6:5b:11:fa:d5:
6c:23:f9:d1:eb:25:c8:83:42:f3:de:a7:f6:7f:2c:
9c:75:a5:aa:3c:4e:85:c9:e1:b3:b8:2d:fa:dc:c8:
e5:fe:43:05:68:94:62:e2:09:09:82:ec:80:cf:49:
14:da:a0:61:af:27:3f:09:9d:ec:7f:fc:0c:d0:87:
10:96:30:41:4d:83:8b:aa:00:98:89:60:6e:48:2a:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:BA:33:7F:96:E1:1F:7B:19:C0:7F:BD:7F:F6:FB:4D:A0:CF:03
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:5e:26:d8:3f:78:94:9a:03:9b:59:2c:3c:ff:60:65:ad:e3:
a3:fd:9f:96:d0:5f:db:d4:c4:af:4a:2b:2e:ba:a3:e3:82:83:
1e:b9:d0:85:62:db:86:14:eb:45:19:49:46:bb:4b:84:45:b8:
d0:38:4d:47:99:52:d8:fe:e5:b3:27:8a:c3:8f:d0:17:c1:4b:
21:22:7d:9a:ef:f7:58:42:7c:b2:bc:3a:f9:b3:4c:6c:95:c1:
a2:53:2f:3e:7f:d1:d7:10:de:3e:26:4e:6c:f6:e1:5f:d8:34:
23:33:88:88:ab:34:6a:bd:37:a0:cd:20:3f:3c:57:7c:61:5e:
86:09:51:38:ea:22:ca:2e:a2:54:05:91:81:49:eb:49:c9:b4:
62:3b:3f:14:98:0a:fe:87:12:bd:b1:5a:28:3b:f4:82:84:3a:
0c:cc:c6:5b:3b:ab:a1:96:bd:94:27:99:28:60:a3:27:59:0a:
fe:14:a1:2a:0a:e2:82:06:b2:72:93:c1:55:10:2a:be:ea:f6:
6d:dd:bc:d2:12:54:f0:41:fb:50:43:c8:35:c3:04:03:f1:5f:
38:ba:82:45:60:99:c5:4e:5c:6b:4d:a6:7f:32:40:ca:bb:f8:
50:23:99:e7:a2:31:af:ce:4f:00:31:1d:d3:62:d6:b3:93:9f:
5e:34:a7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net