Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
File: 7f244d46-87ad-4224-b593-bd81b505345a.roa (raw, json)
Hash identifier: fN0QVWDETUTMbmiXwDsycO4a5SRjK58yEDm4EkoocQc=
Subject key identifier: 19:CA:9B:47:C7:C0:F6:63:79:5D:39:CF:5F:13:70:C2:6C:67:C4:1B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 46BFDBC10A4CD2F3E41C6D1AFAD6DAFB9C490BC3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bf:db:c1:0a:4c:d2:f3:e4:1c:6d:1a:fa:d6:da:fb:9c:49:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=9ba088e273242137ee348e16a412ca2e6b9de8f234633929000b2facee0de6b6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:3c:ab:db:2b:5b:16:82:4d:70:60:1c:47:
14:d8:84:33:90:3c:34:be:85:33:18:36:54:5a:8f:
86:1b:de:13:e3:2e:15:fc:ae:64:fc:15:b6:da:74:
f7:73:8c:0c:dc:d3:26:30:ea:58:0b:3f:64:88:ed:
76:de:5f:ea:48:6d:4a:66:26:76:24:c8:49:c5:b3:
9a:39:ce:c0:69:6d:f2:39:ee:b3:33:e7:93:68:6f:
20:26:c3:ef:ab:a0:4c:70:05:68:13:a4:c5:0f:4c:
fa:50:95:09:2f:d9:36:86:a7:d3:56:e9:f0:47:00:
dc:e1:d8:2e:18:0a:4b:bc:3d:65:43:a1:2d:a8:5c:
e5:b3:af:6e:ac:71:79:a2:11:0b:db:cc:73:29:b6:
84:fc:25:d6:0f:a8:e2:4d:fc:20:6c:76:9e:40:62:
46:47:d9:6d:8b:cd:c9:79:63:62:df:2c:0c:18:ae:
34:bf:15:45:56:34:34:9e:1f:06:9c:be:62:c9:15:
6f:6e:f8:f7:74:b3:47:58:db:41:d0:c0:36:ee:d6:
33:fb:0c:cf:41:e8:7e:32:23:eb:ea:ff:a4:84:f1:
85:8d:dd:d4:95:81:d9:8f:db:d4:56:d9:c4:51:4b:
ca:6b:4d:99:20:42:4a:ac:68:a9:6f:75:e8:58:ec:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CA:9B:47:C7:C0:F6:63:79:5D:39:CF:5F:13:70:C2:6C:67:C4:1B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:9d:64:62:c7:14:ba:92:56:e4:ac:cf:f0:6c:ee:50:db:43:
83:d9:a6:e4:69:c5:21:62:9d:79:bb:40:6a:a6:d9:bc:af:0f:
54:b8:f1:a4:9f:4b:75:65:af:c8:23:b9:77:11:a8:45:c9:0d:
42:34:c2:8f:15:eb:f7:88:f4:bb:4d:b5:a6:05:57:66:62:52:
44:1c:c9:e2:d5:f9:a4:28:4f:4b:89:81:ae:d7:2b:f3:54:d6:
68:d3:99:1f:1b:84:99:f1:7a:de:f6:60:e7:f9:01:dc:1e:dd:
7d:72:41:45:b5:5b:7e:06:f9:80:ba:8a:6d:6e:3f:a0:a1:e5:
8a:58:1f:e4:d5:8a:e7:b2:cf:51:4a:ce:f2:ba:f5:91:2c:2c:
69:22:5d:e4:cb:cc:8b:a4:60:40:4a:7b:04:35:29:c5:cc:9a:
ff:44:7e:80:44:40:2c:59:39:35:f7:1b:a4:24:69:41:56:2c:
f5:fc:55:70:52:9c:31:f6:87:c9:18:80:dd:5f:d9:07:1e:f2:
ea:9e:fc:1f:31:eb:98:c0:61:8d:dc:dd:41:1f:84:47:09:ec:
e4:3e:a0:c1:81:a8:98:89:e4:01:82:15:82:61:f9:75:b6:96:
ac:c4:af:ca:fc:d4:fa:42:d5:66:ad:86:a7:7b:98:da:d2:23:
06:2e:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:20 2025 by rpki-client