Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
File: e1d9282c-1734-4426-ab04-111f2637372c.roa (raw, json)
Hash identifier: gayAelgrKG2RE4OLgWXFyobTDHd5Gk8OcI8foT2VxsU=
Subject key identifier: F9:06:5B:A9:24:B5:6B:02:0E:16:F5:54:9C:10:3C:65:97:AB:55:D9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 38FF22C9BE3528AFD8D3867EB50E1A9C3057CFF1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
Signing time: Tue 01 Apr 2025 15:10:07 +0000
ROA not before: Tue 01 Apr 2025 15:10:07 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 212.173.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ff:22:c9:be:35:28:af:d8:d3:86:7e:b5:0e:1a:9c:30:57:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:07 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=75b207b1feb6d2a8a1ec184dd988e51f0df410e1136a370227f4344e2b82bde5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:30:c0:73:38:63:fe:23:00:27:0d:2e:da:
58:d7:21:28:f5:b5:f8:98:eb:f8:47:4d:92:10:15:
22:40:8d:62:83:74:3a:77:3f:1d:b5:cd:36:0a:43:
b1:4e:b0:ba:66:f1:12:5d:cc:42:18:16:98:e6:ef:
c6:f2:58:0e:2b:79:3a:7b:e0:75:87:a9:6a:e1:3d:
c3:d1:8d:8c:bf:55:b9:91:3a:60:79:8b:6b:6b:31:
d4:0e:87:85:07:58:a7:28:e0:d1:6d:c6:5c:76:df:
9d:b2:00:92:87:07:5f:bf:c6:ed:00:8a:fa:2b:30:
19:1a:f3:7b:73:e7:3d:ea:6b:f0:80:58:69:08:c4:
20:78:14:9d:57:91:72:51:71:0b:29:86:c2:2f:d3:
bc:61:91:ad:ab:67:43:aa:2a:38:fd:21:b4:c2:02:
32:bf:3c:2f:ea:cb:6b:10:f8:7d:37:be:a9:26:93:
2a:2a:dc:0a:11:73:fa:45:6b:a8:bc:dc:05:0f:73:
c7:1c:aa:f6:ed:c9:88:7d:43:e4:b2:db:4b:fc:4d:
e8:e0:85:10:7e:7b:df:07:30:0e:75:c9:b5:30:a2:
2d:e7:d5:d2:62:f5:9c:fd:b7:4f:4b:9c:23:6f:0b:
66:df:43:38:71:04:29:37:f6:a5:1b:c1:11:58:5f:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:5B:A9:24:B5:6B:02:0E:16:F5:54:9C:10:3C:65:97:AB:55:D9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.173.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7e:ac:37:ce:0f:d7:fa:d7:1b:94:9a:60:3c:44:12:cd:ef:96:
2a:f6:ad:c4:c4:d6:6c:bc:31:a8:04:75:a8:4a:75:e2:50:3e:
b8:d8:1f:76:69:1d:6a:57:c7:af:4e:d0:4f:68:e0:99:7a:85:
3e:f5:dd:fc:43:a3:ff:3d:0d:fe:bd:47:b7:e2:32:8e:57:3b:
5d:72:9b:08:1a:ea:4d:de:c2:6c:13:c8:55:a5:91:ea:e8:50:
1e:46:28:14:d4:d4:f6:ad:9f:a8:47:73:77:4f:11:78:de:c4:
6b:a1:7b:f9:9a:f7:c2:ad:26:bc:83:e4:c0:f6:02:53:cd:76:
1d:e3:95:03:dc:e3:23:42:16:73:16:29:35:66:fe:be:7a:5d:
b4:ee:3b:70:8d:d7:7a:b0:f7:f6:65:94:57:31:77:1e:e7:4b:
ae:5f:65:d0:86:0e:e3:48:a6:da:64:ba:43:b8:ab:a4:42:94:
72:a7:2d:b6:16:0a:c4:4d:53:f6:85:81:ff:a0:08:ac:b5:c9:
96:d3:9e:b7:c9:08:ed:cc:8d:1a:86:06:c3:a1:cf:a3:d7:1b:
d7:4e:cc:a1:3c:ed:eb:9b:7a:ed:f4:48:d8:62:1b:67:c3:f1:
f7:0d:27:e9:9d:dd:94:00:bc:8a:ec:16:6e:5b:7e:bb:9d:72:
03:70:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net