Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
File: fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa (raw, json)
Hash identifier: JoP1boox/JDdfdg1BW/G49bVrlxUbUvdrqzCGdR9QVA=
Subject key identifier: C7:43:83:B0:85:45:95:F4:7D:91:D7:27:26:08:49:3E:6B:5A:DA:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1C70996C7669C827B2197B9646ABF8193623F358
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
Signing time: Mon 31 Mar 2025 21:40:08 +0000
ROA not before: Mon 31 Mar 2025 21:40:08 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.76.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:70:99:6c:76:69:c8:27:b2:19:7b:96:46:ab:f8:19:36:23:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:40:08 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=ce53a832c037856bcf262f6e6e00ea0bbf20f35a21b0e5b2b82e14856cbc7776, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:18:37:3a:10:4c:44:ef:d9:1d:b0:59:df:
0c:77:47:49:31:7a:8a:d4:e1:e5:d4:2c:b9:17:8a:
a4:4a:b7:68:f6:f9:71:40:48:52:ef:1d:71:01:6b:
3d:24:e1:b2:33:10:f5:a8:78:8e:39:69:b7:34:a0:
c6:ae:f7:4f:98:78:3c:66:fe:96:da:3e:38:6d:e9:
d0:d9:ab:e5:7d:0a:5a:17:b0:fa:f5:82:b9:bb:6e:
11:96:73:53:1b:46:0e:cc:83:56:38:7d:b5:15:9f:
79:c0:55:5a:5a:a1:6c:2c:ce:f7:f6:91:3a:32:25:
b8:3f:91:8c:23:7c:f6:1a:34:1c:06:95:55:c4:45:
5f:76:97:62:c3:99:5a:e9:78:b2:43:26:62:8f:39:
d1:58:f5:e6:dc:cd:30:88:63:24:23:09:f5:a7:55:
74:9e:65:1b:07:3a:51:75:2a:15:ff:d5:5d:8a:12:
a4:35:b1:e0:7d:8d:c2:a3:98:e7:d6:b5:53:ba:f9:
81:5a:7e:b0:94:9d:b3:48:fb:f5:80:b5:45:c7:e8:
be:bf:0e:89:83:bc:ed:0e:cd:3d:a0:c0:4a:3d:6c:
5b:b1:a1:77:aa:41:8d:53:a9:36:9c:4d:e3:5c:00:
63:e0:b7:3f:f5:49:78:94:51:de:d3:20:a8:1e:6d:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:83:B0:85:45:95:F4:7D:91:D7:27:26:08:49:3E:6B:5A:DA:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:8c:20:29:c2:52:86:9c:f9:38:e2:47:74:a0:61:64:e5:a6:
9b:ec:99:3d:cd:2b:e9:4d:99:65:05:d3:7b:bd:76:f1:cd:18:
c8:d7:ac:41:17:6a:93:bf:98:ce:98:5b:c5:10:92:41:a9:69:
20:67:e7:88:fb:da:15:59:05:25:99:0f:34:f4:41:78:62:bc:
dd:98:d5:5e:4e:d6:50:60:fd:0f:0f:c3:04:92:c0:f6:a9:cb:
12:eb:ea:a5:a5:21:af:50:58:7d:e8:99:e8:67:ad:13:41:64:
81:c1:8b:1b:cd:75:82:07:70:d2:ba:0a:f2:4f:47:7c:85:11:
bf:78:de:f8:a8:cc:a6:02:ac:d6:87:38:8a:01:6c:86:b8:0d:
b3:cd:ff:d5:b8:e1:2e:48:fc:cf:d9:9e:bc:60:51:11:e4:37:
37:5a:84:35:b4:83:07:78:61:c0:e5:b5:aa:ed:71:bd:70:6d:
f2:8b:0d:70:ce:c5:11:6c:e8:f0:60:6e:9d:16:5b:f1:b6:38:
7c:e4:3b:2c:bd:fb:aa:82:93:aa:2c:f2:f3:86:cf:96:fc:34:
86:5a:2f:40:f9:e4:fe:b5:6d:00:5d:ca:8f:8a:1f:c5:4d:09:
e5:85:65:e8:46:6a:1d:da:7d:d3:dd:f8:83:53:43:45:a6:d3:
1b:f5:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net