Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json)
Hash identifier: i0of0Qlefk0jtQysBviL2g28uus9x7e0bZw+tGAr55M=
Subject key identifier: 69:7C:4A:91:3D:A6:F5:20:F9:AF:C9:5C:48:E1:F5:6B:77:69:C2:29
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 18D1A98C4E0AEE2418561CB6BBF167FB9E9F4472
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d1:a9:8c:4e:0a:ee:24:18:56:1c:b6:bb:f1:67:fb:9e:9f:44:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ebf8abbfb2171f1c0db2f6d4a1f6b2057eccf78e2d3ed5ae5479689ef616861d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:08:37:09:f2:b7:06:14:a4:74:e2:fb:27:
33:83:d0:a7:60:b8:4b:d5:42:61:28:8b:30:c9:56:
bc:22:f5:5d:5e:4d:16:5b:fb:00:90:f1:9c:df:c1:
f7:c5:02:4f:d6:ca:8e:a2:a9:a9:49:12:7a:26:d6:
56:da:b1:38:fb:6f:15:37:98:83:fc:e4:ce:4e:0a:
23:09:75:14:01:1e:89:fd:90:0c:d2:99:b6:17:e0:
b3:9e:64:7c:1b:cb:ff:d2:05:bf:2f:9e:70:86:6b:
4d:66:b9:ce:49:fc:ce:60:1b:72:42:c1:c2:34:1b:
cd:55:2a:7e:e9:73:76:1d:90:dc:7f:bb:5b:fc:98:
57:ae:14:6f:36:d8:13:e9:00:a1:61:9e:8d:9c:ff:
e5:f0:cf:d7:40:63:78:8d:96:aa:ae:08:35:d8:1f:
ba:84:15:36:09:5e:cb:fa:1b:1c:4c:17:10:f2:50:
d1:44:45:80:8e:e8:f5:c6:69:76:3c:e6:c4:ff:3a:
84:3b:c3:73:bc:bf:2b:5a:69:25:13:26:dc:2b:70:
58:b0:11:cb:b9:94:34:8e:30:f5:ee:48:f3:9d:14:
51:f4:5e:9e:d0:4b:83:23:17:fd:42:8d:74:f0:c6:
40:b7:ba:39:18:e1:d7:cc:fc:c0:77:0f:fa:70:1b:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:4A:91:3D:A6:F5:20:F9:AF:C9:5C:48:E1:F5:6B:77:69:C2:29
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:0b:7c:e5:90:d0:b5:c5:b7:22:76:ea:a7:c7:57:e0:9f:9b:
c1:68:5a:f3:62:e5:f8:a5:32:bb:31:3c:6f:b3:ea:7b:ad:c9:
21:99:4b:3a:f9:3b:19:83:d3:28:8b:5c:4a:7d:58:4f:f0:ba:
c6:87:3f:3f:d8:f4:55:61:95:a0:aa:49:2b:9e:78:05:8c:f8:
3c:11:24:3e:98:0a:86:b9:f0:42:54:c2:e4:59:0f:2b:49:22:
af:09:7e:37:df:1c:db:42:cc:a6:17:17:cc:85:f5:ae:f9:d4:
40:92:bb:15:a0:82:31:87:f3:e0:52:e1:a0:6e:de:42:21:1b:
04:29:f6:5f:49:1d:f1:23:fe:1b:ac:43:07:9b:30:eb:5f:7d:
00:7c:36:f6:86:16:2e:b4:3f:45:6f:ad:de:bc:0b:19:5e:b4:
ed:f0:53:ad:4d:2e:8a:c4:6a:88:d5:83:ea:a1:9a:a5:77:5b:
05:17:eb:07:b2:be:cf:3f:f0:0d:b7:0a:bd:b5:61:8f:60:02:
56:80:5a:85:d9:36:f6:30:53:ed:6c:fe:fa:a9:39:bb:a9:c8:
69:44:8d:17:0b:b8:d5:fd:d3:71:bf:d6:6a:01:b9:5d:83:b3:
1b:08:28:07:7c:24:f4:0e:47:c6:68:79:6f:1b:8a:41:a2:d0:
a0:bb:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:57 2025 by rpki-client