Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
File: b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa (raw, json)
Hash identifier: AEuGpExcgMx5vewWW8xZbwisdVGlyL9/bAMGEsnUE3Q=
Subject key identifier: 63:CA:96:23:AB:A8:3D:05:36:52:64:B9:6D:01:27:2F:66:C2:E7:F0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5A80A7B59E38BDD934DE0E56159A29CB32062B23
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 194.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:80:a7:b5:9e:38:bd:d9:34:de:0e:56:15:9a:29:cb:32:06:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5ba702f9af78e7511dac0f85d352b2bc6ccdd567db0528ddee72aed91b38e91f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:bb:51:08:3c:84:a0:71:73:a3:1a:4c:a4:
8c:c9:30:70:29:16:f6:48:e9:8a:75:6a:8f:4e:25:
48:03:8b:fc:04:bc:66:69:e8:73:1e:40:17:81:68:
59:c9:15:da:6e:e8:a6:86:2d:fd:41:72:ed:49:b6:
b1:3a:96:30:17:18:0d:05:b7:ba:fb:ad:ef:5d:0a:
a7:b2:06:ca:84:02:7b:93:fb:99:c3:94:55:89:9b:
0f:89:6b:4f:37:26:53:25:c5:f7:b1:0f:cd:3a:18:
1d:f3:78:7e:f3:77:62:70:a6:9c:bf:fe:24:8b:1d:
02:e2:32:93:f3:4d:cb:08:d4:23:82:86:e8:e0:14:
56:ec:3b:4e:f3:84:f4:56:d4:88:8d:11:d4:be:56:
a7:d9:5e:ce:a8:44:f4:da:69:73:4b:ae:86:4f:ba:
57:b9:af:13:c3:8e:04:02:bf:df:87:51:76:86:d8:
e4:0f:76:88:40:ec:c2:77:82:b5:c3:02:8b:3b:5c:
52:45:19:29:16:00:d8:3b:61:23:71:3b:a2:62:a7:
0f:de:70:bf:f4:8b:90:1a:33:f3:3e:70:89:24:6d:
de:de:15:81:93:a8:df:18:22:6a:69:a1:31:71:67:
e3:4d:ee:98:2a:53:9d:e3:4e:b4:87:6c:81:97:ff:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:96:23:AB:A8:3D:05:36:52:64:B9:6D:01:27:2F:66:C2:E7:F0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:99:41:eb:90:7f:12:9f:be:4e:c2:22:c9:99:69:ec:b7:e6:
b9:30:23:e9:8a:c8:0e:7d:fa:47:56:ba:58:60:99:42:cc:01:
d5:7c:87:2a:2f:42:e8:7d:f1:88:d6:ab:53:15:bd:87:a7:11:
b9:01:03:d6:9f:73:e5:cd:40:70:e4:ca:89:9c:4e:17:a5:dc:
fc:b5:de:c5:43:13:04:3c:2e:1a:b7:42:00:ea:c3:28:8c:c5:
b5:17:73:95:2e:b5:7b:3c:23:d5:cd:dd:f9:d8:a1:d4:df:e9:
d6:98:31:ba:f7:07:0a:8d:1e:82:f0:37:ae:08:f7:37:9d:4e:
42:4d:e1:7a:20:bd:d6:d3:47:5b:f3:55:74:d4:09:06:3c:f5:
c2:d8:2d:3b:9c:b6:5e:62:57:98:56:75:dc:7f:4b:74:33:cf:
ad:48:ba:77:d8:b9:60:95:a7:20:0a:58:e4:e1:7a:d7:50:9f:
8b:29:3e:64:d6:f3:a7:81:a7:95:cf:a5:92:ec:4c:7e:d2:47:
4d:f3:c6:a9:76:19:c4:87:a8:b5:d9:87:c6:a0:88:11:24:7b:
2a:12:b4:24:9e:da:68:e4:76:ab:52:10:31:06:ea:10:6f:88:
b1:ba:df:09:40:3d:9b:ce:60:47:e9:38:e3:69:02:70:37:3c:
66:f2:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:28 2025 by rpki-client