Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
File: e6379fd6-eaa8-4348-8280-afb9b8552668.roa (raw, json)
Hash identifier: vhhvOiO0SopG9gziLvYH8LPtdt20M15VyJEqplUSbyQ=
Subject key identifier: 8E:8B:02:93:58:11:A9:09:31:B3:D0:C8:FF:70:6A:D6:85:7B:DF:BE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 428616EF94D6A409193990DD924F7152F8D0FA96
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
Signing time: Tue 01 Apr 2025 15:10:47 +0000
ROA not before: Tue 01 Apr 2025 15:10:47 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 7224
IP address blocks: 83.118.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:86:16:ef:94:d6:a4:09:19:39:90:dd:92:4f:71:52:f8:d0:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:47 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=f666b6fdff1d6da27f36b9fa61e0fbcdd523134606264308a804d6aa0a94aa7f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:40:6a:2b:9a:e7:f4:ca:e7:ef:c9:d2:37:
5c:b2:e1:41:9e:cf:d8:d1:06:a8:d3:05:a0:27:e3:
fc:43:fa:c6:9e:f7:fc:6f:93:19:62:5a:77:45:c2:
34:39:38:c5:f1:8a:19:cd:a6:5a:c0:5d:15:9e:e9:
7b:cb:a2:b6:7f:43:55:16:e7:96:5e:03:dd:46:e5:
86:64:6e:ab:a6:04:57:7a:56:0c:b0:bb:de:9a:5e:
ca:73:62:0f:c9:d7:34:af:57:7f:0a:c1:4b:86:3a:
a0:33:8e:e0:b9:8a:9f:63:20:f4:fc:42:f9:63:02:
7d:1b:ac:7d:db:f9:a0:2b:a3:77:2c:d6:76:9e:e6:
cb:77:b2:c3:40:d8:4d:06:d9:c4:e1:d4:2e:af:ab:
06:2e:10:40:4a:eb:cf:2e:e9:7a:4d:fd:be:d5:58:
55:fd:7d:82:eb:33:17:8a:f0:76:13:0f:63:d3:28:
1d:fe:a5:8a:e2:cc:3a:40:05:99:af:7f:82:36:2a:
c2:fa:20:3f:d7:37:c8:8c:15:21:2f:d1:dc:98:da:
24:46:71:d1:e9:43:18:85:d0:20:74:c4:12:bb:70:
52:dd:10:cc:ef:1b:a0:b6:67:cd:37:25:13:cd:b2:
3e:c8:69:75:08:27:f9:69:16:6a:6c:6d:4c:03:dd:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8B:02:93:58:11:A9:09:31:B3:D0:C8:FF:70:6A:D6:85:7B:DF:BE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:e1:5e:1e:91:e5:09:d6:98:8a:23:83:58:61:95:ad:92:e2:
7c:88:f8:83:7f:c0:0a:30:91:ce:b8:70:8c:ac:88:ca:59:fc:
56:c1:84:5b:dc:02:16:1c:c8:66:f4:3e:06:b2:d0:d4:22:54:
89:76:27:93:5c:96:fd:c0:5b:2e:ca:1f:97:04:5a:8c:99:21:
97:29:2c:f2:71:98:2a:6e:72:1e:45:1a:ca:e0:5a:a0:c1:58:
51:2f:2a:01:ee:89:a3:3c:b8:ab:ad:91:b5:2a:e2:f9:71:b4:
11:a0:2e:8d:c8:26:c8:c2:52:02:cf:63:ba:f4:b0:c5:b0:47:
64:b0:cc:c5:44:d8:f6:49:79:bb:c5:a8:65:a7:0b:82:15:3c:
69:81:18:2c:3a:71:45:26:fe:67:52:f1:4e:76:a9:9c:83:07:
09:ef:6e:4c:01:db:2d:37:1f:95:25:38:fa:1f:c3:e1:2e:c5:
8b:f5:54:f7:8d:ee:66:3a:0c:d0:5f:a0:73:79:f0:82:c8:30:
14:c6:4b:b2:dc:25:7d:a1:d3:13:b2:8f:18:07:96:13:a8:35:
1e:68:73:e3:a1:cf:c9:29:98:57:79:d1:cf:35:14:b7:fe:3c:
d5:31:38:6d:b2:91:aa:99:31:8f:5d:43:b3:d5:9c:86:61:9f:
b3:92:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net