Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: OIZeuBSxbPlxd2gfbM2iLoQJo7rIUMJnDwz1AfFuiJ4=
Subject key identifier: FA:6A:46:0D:1A:F8:99:AF:3D:DA:59:89:B9:F8:31:64:66:E6:CF:1F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E24FC4D8E9702BA8D7F8A861ECC65C4192E0787
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Mon 31 Mar 2025 21:40:14 +0000
ROA not before: Mon 31 Mar 2025 21:40:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:24:fc:4d:8e:97:02:ba:8d:7f:8a:86:1e:cc:65:c4:19:2e:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:40:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=a5f3b11dc36cc92277c132146b3c3023224a574a992a56ebc45cf534709398f7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:a2:81:e8:57:ab:50:6f:73:29:f1:59:b0:
5b:f5:c7:91:a2:83:7a:68:78:96:66:cd:cf:07:94:
59:33:70:d9:ac:89:3a:d9:e8:12:4c:d9:26:ce:44:
f1:89:9c:33:90:0c:38:b1:56:fc:c5:0c:ea:8a:82:
aa:8c:be:08:d6:8e:d6:5a:c2:3e:bf:fe:25:b1:b1:
be:75:e4:7f:f9:04:20:0e:56:27:fa:d4:8d:33:5b:
c7:b4:e7:ba:ac:51:92:c4:90:c4:cd:43:7e:52:41:
ec:fc:78:e7:94:12:48:63:bb:81:a9:11:21:d7:31:
9b:92:72:13:63:75:70:b4:70:14:7f:88:75:03:8d:
9a:3d:15:e0:d9:cc:db:d4:d5:ec:87:a7:eb:8c:16:
8e:be:c5:ff:d8:68:4e:15:32:5d:2f:3f:a6:ba:15:
3c:08:95:66:19:09:9c:9a:3e:b9:cd:f7:6f:84:9f:
85:5b:a8:a9:7a:bb:f1:31:50:eb:9b:df:a5:e2:8b:
1c:39:5f:3f:52:bc:9c:0a:47:c1:87:94:51:46:87:
e6:fa:f2:d3:97:ba:0c:96:47:c8:da:37:6d:4f:43:
ca:f4:06:b5:ac:bb:ba:b7:da:80:3f:35:8f:47:e7:
8d:93:f5:b4:84:03:3b:22:90:4d:bd:f8:a5:84:f5:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6A:46:0D:1A:F8:99:AF:3D:DA:59:89:B9:F8:31:64:66:E6:CF:1F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:15:9a:f3:7d:ee:6f:6e:4d:8d:40:90:a8:57:6b:06:33:1b:
2f:d2:89:78:4b:6e:6f:be:76:af:98:66:44:12:d4:8e:b1:9a:
c5:50:05:e2:f1:af:36:c4:28:89:a6:4a:7a:74:f9:ef:f9:e4:
e3:dd:89:d8:21:ae:a8:bc:0d:ac:4b:ee:58:09:19:5d:1b:92:
b5:b8:5f:3d:00:72:36:0a:22:fc:4d:07:f8:08:0b:0d:db:21:
f2:49:65:69:77:3c:f7:cc:9e:be:30:ac:f3:f2:47:c5:3c:82:
8d:b2:0e:42:04:ca:94:88:68:4c:b1:b0:a0:b4:06:ad:b3:18:
02:ce:2c:33:39:b0:03:5b:f0:86:05:cc:96:42:94:79:24:8f:
59:f3:c7:34:15:c6:fb:5d:44:d3:ed:b1:89:2a:ec:b0:d6:7f:
77:ef:ba:44:58:da:26:26:14:ba:8b:cc:80:4d:20:4f:f3:28:
bc:25:c2:2b:14:53:e4:fd:e7:e7:3c:5e:cd:21:d6:9a:16:7f:
ff:c9:9f:0c:d0:a6:59:a2:4a:f6:9d:4c:2c:32:80:93:e8:02:
ee:70:e2:61:51:85:ed:9c:7a:52:4d:52:f0:6e:0e:7f:84:e9:
ad:18:a9:2d:65:2b:51:44:e6:64:a4:1a:64:15:05:84:53:a1:
a9:d5:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net