Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
File: fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa (raw, json)
Hash identifier: o71jEHhYhyCOlez0/0/+34c2IgECaNi0QOPLZi8vvmA=
Subject key identifier: DE:6B:89:D9:18:EB:C3:F0:92:9A:C3:19:2E:03:4B:F1:7E:D4:2E:F9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47E42FB546FB8760295A3E6D331F91429801EE14
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
Signing time: Tue 01 Apr 2025 15:11:13 +0000
ROA not before: Tue 01 Apr 2025 15:11:13 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.85.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e4:2f:b5:46:fb:87:60:29:5a:3e:6d:33:1f:91:42:98:01:ee:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:13 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=313e9938fbffe8272a50bd7d81c02da1b3dc43f0e0118b233237c90910d931f9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:59:d4:a7:e1:8a:e8:d3:96:a5:8c:89:00:
16:2c:85:f0:3b:f5:cf:14:1f:5d:a4:0b:8c:fe:18:
5c:c0:f8:26:ef:dd:51:48:31:b0:ec:86:c2:c0:4e:
62:2e:65:50:c3:ee:43:10:42:75:7c:5e:5c:6a:c0:
17:9d:f1:bf:22:a3:39:cd:98:15:e2:24:2f:80:c9:
19:c6:64:18:1c:04:8f:4d:69:2b:c4:12:b9:84:a9:
02:bd:f0:06:45:f1:d2:29:f5:fa:ec:2f:e8:14:45:
e7:dc:bc:6c:49:1a:c1:ca:b6:2d:c6:e2:24:c9:b8:
6f:0b:69:e2:a1:11:39:bf:ce:bb:c0:f7:55:6e:7b:
8a:ac:05:31:04:52:84:f5:6e:ee:38:d6:bf:90:26:
93:f5:0d:d1:12:15:82:a4:f0:e5:55:e9:b2:5f:56:
84:73:1d:0a:6f:bd:8e:5a:e6:2f:fa:1f:29:df:d6:
05:1d:89:4d:eb:ef:08:b5:f3:f7:eb:e3:f8:47:d1:
2f:19:e3:c6:99:41:e3:91:60:97:1f:5d:35:2a:54:
9a:50:6d:70:1b:e3:2e:e5:ce:84:e3:21:df:93:db:
ca:f1:c1:70:50:fd:ba:b6:5a:ca:c4:bb:7e:14:be:
a7:d2:1e:38:8b:be:0a:e7:39:99:b9:0a:e1:24:ba:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:89:D9:18:EB:C3:F0:92:9A:C3:19:2E:03:4B:F1:7E:D4:2E:F9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:7b:e3:26:c3:e1:f6:83:f7:5e:cb:78:71:20:e8:37:00:d3:
0e:48:fa:39:35:50:28:ca:65:9c:95:b3:6c:2d:ca:fd:c0:1f:
ee:fa:13:c2:85:93:db:41:d9:e5:7b:56:4d:f6:dc:e7:e0:4a:
34:77:ab:bc:31:1b:a2:b1:ba:fc:89:06:06:af:49:28:14:c3:
97:39:4f:7d:05:02:d0:43:97:6d:30:64:74:48:67:8c:26:f4:
0d:a3:7c:fa:5a:10:d6:b8:07:5f:2d:ce:ab:76:4f:a2:6f:b1:
62:c6:dc:17:e8:13:aa:fc:fc:01:79:cf:a7:f0:a8:69:e6:cf:
49:1f:e1:8b:63:73:fd:d3:0c:c0:6c:7c:49:de:28:78:0c:76:
42:2d:5e:79:2d:9c:bb:fa:62:cc:c1:3c:05:5c:5b:40:11:8e:
d7:b4:0a:e8:a6:e7:2f:a2:f4:4b:18:50:41:aa:c8:13:be:97:
60:5b:0f:df:a1:44:03:a9:02:cd:df:e1:fd:14:9a:c8:05:b5:
52:36:a9:48:06:67:7f:0a:0a:d6:b9:63:2c:db:17:71:a0:01:
24:ac:50:9b:5a:57:a0:97:09:f3:c2:59:1a:52:24:20:a8:55:
7c:ee:4e:3b:6c:b6:88:c1:63:11:a6:0e:38:ca:88:ae:52:f3:
6f:d7:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net