Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
File: 16337db0-8420-40f0-982b-9d50c20f4e08.roa (raw, json)
Hash identifier: xjv3Fb8fu/YLqmPDq0uhpmBzpl41V1+h4p05SUBcUW8=
Subject key identifier: C2:05:DD:C9:6B:C1:0B:55:2F:2B:B2:8A:70:54:58:8C:95:C4:13:33
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 663A2D186B8A6AFB2ACBFD9F5BC0BDE4CC2A7539
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3a:2d:18:6b:8a:6a:fb:2a:cb:fd:9f:5b:c0:bd:e4:cc:2a:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0cfda23fe938c51a02c20ca072794d18c0ae63c79306075c2c3f9d22c2e97a15, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:29:75:03:5a:c6:ba:99:b1:c9:04:1b:64:
2d:5f:6b:8e:67:95:32:ee:7a:f1:f8:5c:a1:c3:d0:
71:a3:fe:4f:8c:94:90:0b:bd:7f:93:74:c4:ce:d9:
19:f4:74:a2:12:c4:eb:32:af:84:08:99:11:4e:44:
80:1c:b6:eb:13:9f:7f:81:84:44:04:7c:bf:f6:1b:
dc:f5:3e:75:15:df:d6:57:66:e6:61:33:80:66:9a:
b6:95:06:0e:59:11:56:a4:92:45:30:19:2a:93:62:
02:b2:c8:51:d7:1d:4c:8e:c7:78:11:6b:47:fb:60:
da:38:d7:54:4e:9f:3f:f1:60:99:25:35:cc:44:31:
f4:40:7d:c9:6c:ce:02:11:90:d5:6d:a0:45:71:f2:
04:ce:b8:a1:8e:f8:c9:00:2d:4c:d4:6c:e0:87:c9:
7a:95:a2:3f:d7:55:79:bb:8f:43:ac:71:bf:81:c5:
23:61:a0:62:e1:a9:f6:81:9d:53:01:84:dd:f3:3f:
36:bc:dd:04:00:d7:5e:cd:a1:ea:66:42:2a:14:d3:
58:42:4a:d1:98:9f:3b:20:52:04:96:85:df:fa:e0:
9d:86:4e:08:48:97:b0:75:96:5a:d7:66:31:26:48:
e4:dd:1a:62:13:5f:e8:db:04:65:02:81:f5:95:cd:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:DD:C9:6B:C1:0B:55:2F:2B:B2:8A:70:54:58:8C:95:C4:13:33
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.254.0/23
Signature Algorithm: sha256WithRSAEncryption
72:41:70:46:a8:fd:8f:93:a8:3e:fe:d3:85:60:62:b8:2a:df:
d4:0e:03:fc:19:18:73:90:a8:28:f2:17:6e:f8:75:99:17:50:
f2:bf:64:18:a0:54:d3:f5:6d:81:41:11:e6:79:ea:ab:6b:05:
9f:38:b7:c6:5b:a2:89:e0:f8:54:09:8f:20:20:3d:bf:c4:fd:
cd:f9:67:ea:14:02:d1:1c:3c:b5:dc:7b:b5:33:80:4a:09:37:
29:c0:36:4a:3c:3c:bb:0d:40:83:21:c6:e4:f4:21:4d:f3:a2:
9e:74:a6:b0:14:c5:ca:08:81:01:31:61:ad:6d:49:2a:5b:6d:
9b:11:98:90:0d:7e:99:2d:d6:36:de:e2:82:c3:a7:70:4c:9a:
32:50:cc:b9:a7:6e:d6:af:7a:f0:06:61:df:c7:fe:66:41:28:
0a:d7:39:64:60:4b:d1:c1:ea:f3:35:eb:69:5f:14:f9:95:7a:
a3:43:72:f8:46:79:1f:fe:8d:9a:57:7c:fe:8f:6f:d9:8c:e1:
fc:7b:72:3d:6d:11:03:83:87:f0:55:09:e6:d6:0b:2e:7d:6f:
f7:03:ff:28:1a:e8:c1:ca:b8:a6:5e:cb:d7:dc:b6:f4:5b:39:
61:1f:fa:0c:bc:f2:4d:c2:f9:1d:6a:4c:fc:31:90:36:67:2c:
ba:f6:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:33 2025 by rpki-client