Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
File: fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa (raw, json)
Hash identifier: 1xOZuzR97qbTvVEqLs86rI9xVjwSrtfJIp2djvSIyWU=
Subject key identifier: 7C:78:7F:0B:3A:BB:D2:91:72:6B:0E:7E:AD:67:D0:B8:C9:49:34:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3EDFF4FEE062485ADD50C8E46D9501446BF9BBC9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
Signing time: Mon 31 Mar 2025 21:40:16 +0000
ROA not before: Mon 31 Mar 2025 21:40:16 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:df:f4:fe:e0:62:48:5a:dd:50:c8:e4:6d:95:01:44:6b:f9:bb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:40:16 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=27b20e36824a406ede39886ba93267be0d159d0fdabe3dc202eb0c642a33c818, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:92:37:87:33:3e:d4:6a:5a:e3:a1:c7:77:
a8:c9:5e:1e:8e:5a:0f:03:be:51:77:5a:48:b3:f4:
f3:23:ca:d1:9d:e3:38:f2:7d:78:56:00:55:14:27:
c3:f8:82:b3:ab:71:24:30:c8:62:94:80:4b:f4:83:
76:e6:5f:29:92:89:07:07:91:eb:e3:15:9d:f9:9d:
98:e6:10:81:f9:a5:57:5e:e6:40:6e:67:71:30:ad:
71:54:70:8b:4b:51:d0:c6:7d:70:7c:fe:6b:26:e5:
da:ce:bd:d7:70:c8:5d:85:9c:64:9e:67:fb:67:ac:
86:36:9f:5a:14:94:f6:b1:c7:10:2e:04:9a:68:79:
ae:39:f7:3e:96:15:74:fb:c4:d5:f6:7e:6e:19:2b:
ca:bf:37:33:d2:ec:d9:22:43:cd:e6:33:69:c8:60:
53:3b:4f:d2:6c:5e:6c:dc:be:e7:3e:f7:a4:84:ac:
75:6f:c3:42:87:51:b4:f6:48:99:be:77:17:cf:d7:
53:f8:85:d2:2d:c4:ae:c5:da:c4:b4:59:95:6a:26:
69:03:da:20:cd:43:c0:5e:42:b5:2b:3d:63:b7:30:
0c:91:c5:66:e6:48:d9:a6:f7:33:57:09:d3:54:41:
5b:90:02:64:83:bc:d5:79:7a:19:cd:e5:cc:fc:90:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:7F:0B:3A:BB:D2:91:72:6B:0E:7E:AD:67:D0:B8:C9:49:34:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:15:15:b0:94:0e:ca:c4:c0:cb:33:67:fd:a2:7e:b2:75:f9:
d7:16:99:16:c6:03:56:a6:cc:7c:11:9d:95:30:9b:76:5f:4d:
a3:e1:bd:7a:77:14:86:2f:bd:8d:d8:42:29:1e:17:78:f2:64:
15:a4:e3:8e:62:c5:6a:9c:29:d2:b7:e8:3b:b1:a1:28:76:22:
32:77:78:35:37:8c:dc:0b:86:f9:ea:87:40:08:c5:35:e1:72:
8c:5b:64:ef:9c:02:5a:9d:c4:0f:84:55:88:7b:d9:be:bf:4e:
cf:75:30:60:f7:a4:04:08:02:4b:67:ea:33:5d:86:97:96:7d:
63:28:46:83:a5:0d:f9:be:22:96:d0:ee:ff:48:57:2f:09:d0:
ac:9c:49:65:93:f2:f3:01:95:f1:1c:a2:4c:a9:25:a2:3f:b8:
53:d9:39:47:8f:66:db:2c:d7:4e:71:e6:78:36:cf:2c:61:e3:
e6:be:c5:34:2a:9b:35:b6:33:4d:31:91:94:90:90:e7:4a:7c:
52:cb:ed:d0:1d:53:9c:83:8b:13:a3:5e:77:39:2b:0b:e4:f8:
79:2c:30:c2:c5:db:dc:4c:b9:08:0f:2b:07:4a:2c:50:2a:2a:
d5:64:e7:90:a7:67:17:b9:bd:36:a5:e9:f6:c1:5d:ef:24:47:
68:92:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net