Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
File: ecd45447-b567-4c62-b588-28bb50cce889.roa (raw, json)
Hash identifier: 96M5bZ8WQy5KDVFdUEumV+z89DJTF4w2C9eyTUYIr2A=
Subject key identifier: 5D:56:40:72:E7:03:45:A1:14:FA:BA:00:AB:B9:2B:CA:6F:B9:01:00
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50BB90CA81C676775F77D0965AD6A7432B4FAEAB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
Signing time: Mon 31 Mar 2025 21:30:08 +0000
ROA not before: Mon 31 Mar 2025 21:30:08 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bb:90:ca:81:c6:76:77:5f:77:d0:96:5a:d6:a7:43:2b:4f:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:08 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=730d716595a9b2d53bf2744cbbef825d9ffb048f44a303adea9b8ef76cc89b38, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:0f:ea:ed:bf:8d:82:12:17:38:ba:4b:08:
72:19:74:70:2d:13:34:9c:6f:57:a9:92:8c:39:2d:
19:03:a1:68:34:ae:a6:bb:dc:5a:df:44:5f:07:9a:
25:6d:02:88:e1:35:1d:af:1c:b6:8f:06:98:00:23:
45:82:1f:4e:a0:2c:9b:04:ee:c7:bc:5e:ed:c2:cd:
fc:8c:a7:d5:6a:f3:2c:e4:0e:b9:a1:9e:72:80:27:
ff:a7:94:ac:12:a4:dd:11:94:5d:de:dc:03:dc:91:
dc:f2:1f:59:68:50:b9:6d:2c:89:a9:c7:09:ab:d7:
40:71:30:68:36:8d:d4:dc:fc:47:c4:77:6c:7f:5c:
83:30:33:f7:4c:73:e1:44:a2:f8:9a:d2:b6:9a:2e:
da:2c:34:58:8b:df:70:15:52:83:10:5a:8f:b4:5d:
de:82:0e:f6:c0:05:c6:8e:2a:81:c3:90:cc:c9:94:
d5:fd:6d:40:37:94:d0:1c:d6:08:2d:d1:48:18:e7:
67:67:61:ff:74:f3:ae:85:ca:29:e6:72:59:8d:6e:
bb:c7:53:7d:f2:7e:92:f6:61:c4:da:a2:5c:40:34:
a6:5a:a7:7e:8b:e2:2c:72:82:46:e0:7a:33:b1:d0:
f8:94:c4:1d:b2:32:9e:98:10:fe:f3:d0:d6:37:9d:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:40:72:E7:03:45:A1:14:FA:BA:00:AB:B9:2B:CA:6F:B9:01:00
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:48:bd:42:1e:a4:24:5e:2a:6a:f7:12:09:3a:9e:70:c5:97:
d4:65:ef:02:b0:fc:df:b3:ac:b0:fd:32:67:f9:28:49:31:b7:
c6:5f:c3:8f:f0:b5:4f:7a:d9:39:21:59:c1:d8:7e:6c:cd:d4:
76:5b:c2:e6:39:43:bc:5c:5a:c9:70:e7:0c:95:ca:c6:2a:48:
80:20:63:b4:29:cf:24:52:5d:f7:06:98:79:0d:44:2f:d2:2f:
67:ba:98:a9:3e:87:d4:41:90:65:3a:90:c4:54:f2:f4:cb:1f:
f8:82:bc:c1:fd:55:e3:7c:30:d1:14:cc:6f:e8:8d:15:81:11:
6c:b4:94:a0:4f:3c:8c:a7:e6:75:c7:53:ee:c8:ed:0e:5b:00:
3e:3f:fd:7e:c9:5d:b3:6c:2a:d0:b6:ec:29:68:0d:f4:da:3f:
22:09:8d:a1:b4:6c:93:a3:1c:3b:7b:e8:9b:29:67:fd:53:13:
48:59:e3:b7:07:a9:47:77:3a:14:5d:2e:93:26:6f:fb:cf:92:
1e:c4:cd:3c:03:48:66:37:51:25:d0:45:fd:a9:1d:20:5d:32:
77:10:8b:cb:34:74:ff:7e:7a:7e:19:a3:04:ff:1f:a0:75:f4:
19:a6:2b:49:a0:f7:01:fa:a0:09:8a:77:4e:4a:8b:66:2c:33:
a6:1a:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net