Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a474cc19-3913-40e7-ba75-6bf55cdb6351.roa
File: a474cc19-3913-40e7-ba75-6bf55cdb6351.roa (raw, json)
Hash identifier: qemmksRbzhFscoNldRqYqmJtcXAZhqr1sC4l4TmnJDE=
Subject key identifier: FB:9E:EF:59:31:A7:B9:8C:C0:E4:3E:EE:FF:B8:47:AF:27:FD:82:33
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1B13F87222EABACC5A6ADBEFC597BA13A9F2CAA3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a474cc19-3913-40e7-ba75-6bf55cdb6351.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:13:f8:72:22:ea:ba:cc:5a:6a:db:ef:c5:97:ba:13:a9:f2:ca:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=25e9aeb8a793f03cbefdac288b3ce0115a8b90851ae42f50125cbcfee2605dd0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:c3:4d:c1:d2:ed:e0:24:fa:72:ec:08:92:
41:df:c2:ec:db:78:cb:f3:9e:27:42:d0:b9:31:fb:
43:ee:98:e1:73:c2:9a:59:95:5a:9c:b9:51:98:ed:
80:75:0b:a8:e1:ee:ad:2c:dd:d4:4d:c7:f9:ba:14:
89:5e:8c:85:09:53:3c:ba:47:e9:4f:56:9a:1c:7e:
0a:88:12:f7:77:c6:2d:65:a2:21:b5:bb:d9:bd:70:
de:d8:62:d1:ff:ec:fe:7b:cc:1b:86:2c:87:c6:66:
4b:1f:14:fe:e7:dc:3b:a2:36:f9:9f:02:9e:a0:6f:
df:04:85:42:96:ff:4d:43:49:f0:42:73:e1:4c:35:
3f:8c:ce:e7:74:b9:93:02:59:8f:9e:9e:70:bc:d4:
e3:4a:e0:23:9c:1b:75:56:6f:06:33:ad:3c:bb:a9:
2d:0a:6c:a0:03:4e:2a:b0:90:a0:db:97:0f:02:66:
03:ef:19:25:22:c6:4f:d9:4d:ac:7e:f6:24:76:34:
a0:e0:0a:31:0c:dc:f3:ac:16:43:23:25:66:9a:5b:
65:70:53:55:df:a8:22:6a:89:33:80:fa:95:25:bf:
d4:84:32:34:e8:d7:d1:a0:3a:d0:ae:ae:4b:65:67:
5d:ba:fb:10:c9:e9:7e:63:f2:cb:d9:e2:bf:ce:65:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:EF:59:31:A7:B9:8C:C0:E4:3E:EE:FF:B8:47:AF:27:FD:82:33
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a474cc19-3913-40e7-ba75-6bf55cdb6351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d1:30:32:7f:8b:74:72:c4:8c:aa:04:59:d6:87:10:13:57:ba:
e8:dc:33:de:a0:fb:dd:6d:1f:31:ca:a8:08:29:0e:eb:af:1a:
f5:89:e7:11:31:fb:d2:16:e0:98:31:23:7a:4b:70:c3:f6:0e:
e5:ba:b2:cf:bf:91:61:e2:1c:84:f0:ae:7a:69:48:d8:78:8a:
56:5b:65:f8:43:2f:e8:43:b4:54:a4:fc:dc:6e:c9:6f:92:f2:
8f:bd:50:bb:2c:02:90:4d:45:bd:31:13:96:7e:09:7e:ee:e7:
85:59:36:b1:87:e7:b1:41:21:d1:45:f0:cc:68:0b:a5:43:be:
9d:74:50:61:bc:47:17:58:5a:cb:90:0d:0b:51:92:74:df:cb:
b2:2d:8b:b0:d5:51:ea:fe:39:dd:d9:df:c0:57:bd:5d:61:d3:
e5:9c:a2:7d:13:c4:dc:a6:fe:1b:0e:70:b8:2b:3d:23:25:6e:
53:24:96:45:c1:5d:a1:db:ba:9f:50:05:80:d4:51:d6:16:5d:
a0:1f:43:7b:c9:48:36:fa:13:6a:a0:8c:e4:f0:35:6b:1f:1a:
c9:88:e8:ff:24:b4:21:ee:96:6b:11:61:1d:62:e3:d9:ae:ff:
0a:2a:1c:9c:04:35:73:53:34:9b:44:39:9d:98:50:86:42:2b:
29:f7:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:38 2025 by rpki-client