Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
File: fc50f617-7597-4f4e-b8f6-87763b28caf0.roa (raw, json)
Hash identifier: /2kyu9kmQ5p/DsLzoq4ksroyn9AuRaN6WcSyhp84ZnY=
Subject key identifier: 13:BE:1D:6A:D8:6F:FD:D6:58:74:3A:6C:62:4E:EF:F9:6A:2F:8B:45
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 52072804EFB9D87F3A25CE58385CCBCFB3BA7E9E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
Signing time: Mon 31 Mar 2025 21:30:22 +0000
ROA not before: Mon 31 Mar 2025 21:30:22 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:07:28:04:ef:b9:d8:7f:3a:25:ce:58:38:5c:cb:cf:b3:ba:7e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:22 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=4840292fa4c00ac271ca3780d42d9416c3e76f26bf5aab4c050c31a27da4553e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:19:9a:b2:a7:5f:46:d7:07:98:da:80:3f:
a6:08:66:83:2b:ee:cf:73:1e:d9:eb:d2:3b:3f:d1:
30:fc:f2:76:2b:b1:a2:03:0e:f1:36:b5:c6:4a:a2:
8e:ed:aa:d7:ec:5d:5b:dc:ac:6c:b8:00:27:03:2d:
26:af:73:51:25:f4:e0:ce:6f:f4:ce:85:d6:c1:fd:
07:92:fd:e0:06:95:24:30:40:15:91:1d:e2:cc:20:
09:bd:24:eb:b7:98:2a:79:26:ee:e2:a5:e2:ad:d7:
19:4e:68:94:7e:76:79:ad:ec:85:3b:89:82:a4:fe:
1b:27:cd:ad:c3:24:8c:31:8a:c4:0e:a3:ee:d3:b5:
59:2d:bc:fe:7f:68:eb:a9:e2:13:aa:e0:91:8c:cc:
e4:aa:5e:1f:bd:3e:0a:2b:c0:c1:cb:15:f4:66:0f:
5d:d1:c0:f6:bb:09:ca:1c:79:87:62:67:74:c3:6a:
14:64:54:09:79:df:2f:0f:e3:0c:28:a9:37:6d:5d:
6c:4e:49:49:82:9e:04:a8:3e:c2:95:f4:c3:57:0a:
da:88:b8:e3:10:12:b2:bc:55:ab:94:ef:5c:68:38:
36:af:a7:c1:58:ff:a0:33:28:e9:1d:13:a1:65:4d:
95:35:5f:91:f7:38:85:22:06:b1:66:68:4a:39:db:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:1D:6A:D8:6F:FD:D6:58:74:3A:6C:62:4E:EF:F9:6A:2F:8B:45
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:4e:23:f1:4d:f9:c6:ff:ab:aa:98:eb:d9:32:13:d7:90:0b:
58:2c:b3:8c:0f:2c:71:96:10:16:94:05:13:85:d3:48:7c:0d:
56:dc:68:13:51:d1:f5:0e:1c:7d:85:9d:df:b3:c5:cd:87:96:
cb:8c:71:03:ee:e2:f0:c5:8d:4f:37:26:d9:f8:38:64:0a:66:
80:af:92:b8:8e:19:cb:d8:43:e6:40:9f:f1:10:ed:0c:fa:92:
e9:72:c1:a7:0b:7c:7f:da:40:bc:27:e9:5d:ba:9a:3b:53:d4:
09:a0:7b:9a:6b:c8:15:66:88:d1:58:4b:d5:23:6e:15:df:bc:
65:e5:34:c2:c4:1d:35:a7:56:b0:66:a8:4f:90:56:70:51:ed:
3a:92:46:70:2e:89:ab:86:96:6b:b2:a5:bb:27:f3:b1:c8:75:
7b:56:04:73:6f:99:ea:5f:70:2e:96:5f:29:97:7f:f4:8c:69:
75:ce:d7:f4:09:a6:46:c8:58:3c:b7:81:d6:24:72:e5:09:29:
69:d3:eb:ab:36:e8:02:7b:e6:ec:a4:7b:4f:14:95:5a:c9:9c:
38:46:7c:de:3a:35:65:e3:39:31:3c:af:58:5f:63:9d:7c:65:
ff:b8:50:d9:e1:8e:0a:64:c0:10:36:2e:ae:d1:2f:78:ac:fa:
04:7c:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net