Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c3872047-e1f4-4ee3-832d-c624ea352355.roa
File: c3872047-e1f4-4ee3-832d-c624ea352355.roa (raw, json)
Hash identifier: 3z/6jgYgcpxQ3d/KDFbVfGGKdv8+7fT2bQzIFbr/JF8=
Subject key identifier: 55:7C:2D:84:FA:E5:32:C5:27:62:AE:6F:6B:12:F9:F4:60:CC:B9:8E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3DFED97CBD9BF211D6C4471328479906088E4E3F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c3872047-e1f4-4ee3-832d-c624ea352355.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fe:d9:7c:bd:9b:f2:11:d6:c4:47:13:28:47:99:06:08:8e:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=311cafcc104037b559b2d2865486ea144383936f4eaf2e8bc9bd1c6f77a58fe2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:e1:1f:fd:39:64:bf:a6:8c:b6:b2:e3:37:
5c:f7:d9:02:99:cc:5e:4b:92:f5:4e:cb:d7:a5:d2:
dc:1c:cc:f6:75:2e:9b:82:47:b3:4e:04:f3:48:bc:
0e:69:08:77:a1:0f:55:32:4e:f0:b2:04:ef:b5:f1:
35:16:30:dc:4b:c1:4a:20:bb:b6:16:23:81:97:27:
15:26:60:ba:f4:0d:91:34:5e:77:76:42:98:b1:8d:
e7:ad:4d:40:8b:71:0b:41:8b:32:b8:55:24:17:bb:
82:ac:41:30:1c:2a:06:d2:68:bc:68:5d:00:26:26:
8d:0c:7a:5d:4b:96:0b:13:86:03:ef:6a:cb:78:ec:
1a:52:58:cc:32:6e:fe:52:58:9a:0e:47:74:21:1c:
41:8d:d4:db:f2:df:14:da:fb:0d:9c:a2:59:b0:2f:
93:b0:07:78:5b:56:88:8b:ef:db:44:7f:86:31:9c:
59:05:46:8a:a7:f1:e2:44:51:60:09:e7:45:0b:8d:
06:ee:67:e0:49:7a:f7:fd:23:1a:3d:be:bf:24:41:
b6:ac:77:aa:4b:d8:20:a0:d8:55:2c:3b:d1:46:d5:
ba:21:3f:76:cd:7d:34:99:c3:ab:5d:7f:97:40:a9:
31:92:11:7f:7d:58:b1:92:88:82:7d:88:6e:f1:f0:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:2D:84:FA:E5:32:C5:27:62:AE:6F:6B:12:F9:F4:60:CC:B9:8E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c3872047-e1f4-4ee3-832d-c624ea352355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:fe:f1:a0:c8:f2:14:44:01:16:c4:e7:d9:74:a8:ca:56:be:
a1:9d:0e:71:1e:aa:63:c7:10:5b:69:04:4c:8c:9f:ed:b2:18:
76:08:b4:77:65:ef:b4:23:01:bc:ea:f1:0d:b5:e6:e9:31:c5:
15:70:7e:62:da:1f:ba:60:d5:a3:2a:31:8e:f9:6b:8b:4c:84:
d3:75:88:38:be:f6:51:6d:af:75:af:ff:06:71:65:65:69:f7:
73:3a:75:2f:67:31:99:09:51:bb:a9:89:72:0d:4b:87:77:cf:
db:f1:d6:68:88:88:c4:87:f2:37:91:c5:b6:b0:6f:52:98:1f:
3e:5b:0b:3f:3f:b8:42:0c:9e:e0:17:04:f1:25:9d:d5:99:5c:
8d:5d:00:4a:b9:8e:6c:55:99:e2:b4:45:ca:da:fb:d8:1d:d8:
e3:5d:f1:f1:57:b1:f8:e4:e9:91:54:dd:a4:35:ed:56:7e:d4:
48:24:e6:d6:c7:c9:87:97:f8:8b:f0:ee:16:a2:a8:a2:0b:ba:
6d:3b:fa:69:51:65:d2:fb:9f:fe:4a:46:72:bd:9b:fe:c6:66:
62:30:e5:c2:05:bc:b9:db:87:82:3c:9b:bd:39:29:ea:b2:b8:
71:f7:f6:a1:71:bd:54:39:93:e8:04:2f:13:57:9d:07:65:cb:
c4:30:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:47 2025 by rpki-client