Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
File: f0b62efe-867d-4733-9b0c-8354a04195f8.roa (raw, json)
Hash identifier: s/i9ePZRdTDj7/yIcTj1/UBsiszMwM7cO2iFnbuWcYE=
Subject key identifier: 1B:5D:4E:C1:1B:84:54:36:FA:66:57:9F:BA:E8:18:C9:AF:67:8E:39
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0CC552AD827F3641C99150A8FDB2DE3E6A171935
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
Signing time: Mon 31 Mar 2025 21:30:30 +0000
ROA not before: Mon 31 Mar 2025 21:30:30 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c5:52:ad:82:7f:36:41:c9:91:50:a8:fd:b2:de:3e:6a:17:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:30 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=1b5ab969772b0f6a1966ea50ef630362ac8f0d41c1aedbe8370f53af192f1ad9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:de:92:67:e4:2b:5f:c9:02:64:c1:01:84:
76:5c:05:df:cd:a3:8b:05:b8:b2:3f:9f:8a:e7:3d:
99:bc:1f:82:53:ac:ff:c6:c0:85:96:bb:cb:8d:23:
88:ba:87:5f:ea:39:5b:c1:01:c9:28:d2:85:f0:7e:
5f:90:97:0f:7c:dd:6c:f7:6e:93:4e:0f:9b:09:b7:
b4:05:aa:c6:d1:77:18:92:ab:ce:79:91:a6:19:aa:
5c:6f:63:08:34:14:3e:11:18:b7:bb:84:3a:0e:4c:
09:61:96:0d:28:75:19:64:7d:d8:96:4e:27:e6:f3:
b6:6d:d1:e1:50:e2:ce:52:88:66:c2:0f:de:26:98:
c7:18:40:6e:4a:ae:36:5a:1a:f9:40:98:b5:d7:75:
ed:8f:bd:79:4b:06:bc:ee:1e:2c:c5:32:52:57:b8:
e9:f6:81:b0:91:59:29:17:45:6e:df:2c:4d:1f:8e:
76:92:f8:b0:7d:c0:49:e7:dd:bf:13:13:7a:47:ba:
ac:d6:d8:01:22:13:4a:d4:46:d6:e6:80:b4:98:c6:
68:83:73:cc:d8:7d:0f:e2:90:92:a1:b6:59:09:88:
65:5c:ec:0e:03:2b:7f:9c:66:34:68:65:85:ef:e6:
1a:23:c3:6d:b8:54:9d:f0:1e:90:37:2c:fb:81:fa:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:4E:C1:1B:84:54:36:FA:66:57:9F:BA:E8:18:C9:AF:67:8E:39
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:e4:04:60:a0:85:18:c3:fb:38:44:b9:99:36:65:19:7b:2d:
01:5f:e0:7a:af:24:89:66:71:01:0a:2c:c6:4e:91:dd:8e:19:
2b:41:ae:5c:e1:2d:9f:72:62:f9:c9:f9:27:f0:4e:e1:36:ef:
56:cd:f1:f0:04:f3:fa:ad:4e:62:6d:cb:0a:9d:a5:70:53:71:
05:98:37:c4:a3:4d:8d:be:47:27:bf:60:20:1d:db:31:ac:55:
08:92:37:d5:f0:51:9a:3c:39:46:06:7e:e7:7f:66:e4:9f:f8:
2d:60:d9:7b:4d:68:5c:41:a4:ce:20:3d:f8:33:f5:aa:f1:9d:
61:bc:4d:23:df:9b:31:4b:7b:b2:94:55:32:77:3a:40:01:ba:
c2:41:80:1a:c2:fa:df:58:be:c8:e5:e1:6d:1e:25:b6:d3:24:
d7:48:f0:d0:77:93:81:2e:0c:cc:ea:bb:39:68:16:c2:47:7c:
58:33:da:44:68:4c:7b:3f:d5:2f:7e:e5:89:11:a7:60:cc:c3:
56:02:08:1a:3f:3a:da:5f:b1:79:f3:84:03:ac:7f:ab:97:45:
8e:03:04:7e:b7:13:bf:04:cf:1c:18:02:59:5e:d8:94:4c:02:
60:35:cf:29:10:4a:e2:7f:41:c5:46:30:f1:e3:9a:31:12:1c:
bd:1e:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net