Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15288dfc-bb6b-43a2-9ec3-7275954dae14.roa
File: 15288dfc-bb6b-43a2-9ec3-7275954dae14.roa (raw, json)
Hash identifier: dLNnUVwCUFh3fNveAC66GEMZEvUc87i2FYKuKUVwvA4=
Subject key identifier: CC:D7:EF:8B:CF:DE:5D:2C:84:02:77:9D:09:63:AC:CA:FB:D9:A8:2F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 58D9D2318A336F4D2D0B95B0B0901CACC8FCCE68
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15288dfc-bb6b-43a2-9ec3-7275954dae14.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:d2:31:8a:33:6f:4d:2d:0b:95:b0:b0:90:1c:ac:c8:fc:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=680ef46c6689149ba17dd1a62d16b250af3c9700500b47d1b2bdb6927ec1408a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:cc:9b:37:00:63:6e:40:13:ef:54:7b:3e:
22:44:d4:93:a2:b8:59:a1:e2:84:bb:bc:34:1f:09:
72:0e:c0:df:15:d5:bc:18:15:2c:d7:20:85:dd:c0:
87:3c:0b:82:e0:af:52:b6:8c:4f:33:d3:01:45:8a:
8e:b7:04:76:8b:f0:6c:d4:29:5f:3e:5d:c5:7e:80:
c9:01:68:06:fa:57:46:e3:4c:72:6a:a5:48:c1:86:
a1:0f:55:af:ce:ec:83:4b:bf:21:6f:66:1e:37:19:
48:47:3a:c3:f0:dc:8c:aa:7b:52:ec:21:e3:2e:2f:
0c:12:5a:87:1f:33:22:39:ca:07:3f:4a:0f:b5:f3:
4d:8a:bb:85:dd:42:67:7c:fe:2d:7b:21:66:39:a1:
7c:e6:4f:2c:45:79:b5:80:3f:07:64:24:bc:ef:40:
d4:20:bb:33:75:8f:bf:b7:ea:2a:59:6b:7d:ca:b8:
28:10:ac:ff:db:a8:80:1b:64:94:b2:cb:a1:82:c0:
45:30:ab:63:fc:7a:e5:a7:a0:c1:6b:95:4f:8b:4a:
d3:bd:8b:8e:3a:8e:df:71:46:0e:89:1a:cd:1b:6f:
55:8d:ee:16:71:e9:d8:89:5a:af:31:63:74:33:e6:
af:73:5a:c5:39:b9:2b:1c:ee:54:ed:3a:90:ee:cb:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:EF:8B:CF:DE:5D:2C:84:02:77:9D:09:63:AC:CA:FB:D9:A8:2F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15288dfc-bb6b-43a2-9ec3-7275954dae14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:45:67:12:74:56:31:dc:a3:bf:15:dd:d4:54:b2:04:de:de:
e3:29:96:48:22:ad:17:b1:10:c3:d5:ac:47:3c:a7:c4:90:ae:
00:8a:1f:a1:26:a2:fe:b6:fd:7d:97:fa:74:a3:73:d1:85:3c:
8b:af:8f:92:98:31:34:b0:ce:e4:f1:93:2a:59:98:eb:93:21:
b5:c6:1e:df:98:8e:37:2a:63:be:41:db:3c:8b:ba:e1:53:61:
ae:72:84:65:f0:f9:fa:f3:d7:b6:27:3c:83:ac:ff:71:7c:a1:
ef:1d:54:86:05:9b:c5:42:46:d0:bd:c7:e7:15:34:11:35:13:
7e:72:65:9b:aa:36:6a:9f:c7:0b:df:b5:2b:47:18:89:5f:e4:
05:5a:e1:7e:76:a8:63:78:f3:09:6e:f1:7d:e6:ff:3f:41:b5:
f5:de:97:70:48:6f:a2:b8:c2:bf:6b:f2:58:76:df:a0:9e:03:
6e:6e:2c:56:88:1d:3b:6a:09:b9:7d:13:e0:ec:fc:97:44:68:
b2:d5:7c:c3:f4:fb:96:3d:db:0f:c3:1b:a1:f0:fd:14:33:25:
5b:38:26:ae:0b:f4:93:f3:26:c1:66:78:bd:69:de:ed:e0:a5:
bc:29:6d:56:9f:f4:78:10:87:63:61:51:24:21:45:f6:4a:ca:
b1:be:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:24 2025 by rpki-client