Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
File: e1d9282c-1734-4426-ab04-111f2637372c.roa (raw, json)
Hash identifier: MOssFG8RNXuqH1Et72b6ojZgE9HnLlvvBTTef0+O00g=
Subject key identifier: 5D:E3:21:3E:D9:1B:7B:41:FA:7E:52:BE:C0:E4:23:83:F1:BC:3E:02
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 413AF8848A7CD0D7E2B331B917D55C4C9BAD7295
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 212.173.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3a:f8:84:8a:7c:d0:d7:e2:b3:31:b9:17:d5:5c:4c:9b:ad:72:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=835cd3d54e45615f399957b09d8187411b04b3fb74f44d3d7a9a2dced5f24450, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:5e:57:7f:57:4c:c2:12:25:08:33:e5:cc:
e9:2a:c9:c0:93:b6:55:e8:39:88:7b:cd:22:1e:b2:
0e:a3:fd:60:f0:22:e2:8a:b3:b8:30:95:c2:7a:b9:
47:84:e3:46:72:b0:b3:b4:ba:94:a6:fe:4a:0f:59:
e3:bb:81:30:41:99:03:74:f2:21:da:b6:a1:dc:1e:
f6:f1:52:91:bf:24:3f:e8:1b:a6:53:7a:b5:ee:d7:
63:36:76:8e:54:be:71:86:66:cc:b7:1b:bd:d7:b8:
20:f4:c3:c7:b2:30:6e:70:cc:25:0d:07:a6:31:e1:
54:bc:ec:20:82:3e:27:03:e6:35:17:51:31:3e:6e:
2d:61:02:40:2e:5a:85:c7:b9:16:3d:30:be:f0:94:
6f:24:2c:20:03:3b:e0:51:7e:f9:f5:78:28:8a:d5:
1d:1b:56:cd:09:bd:cc:48:1e:17:ff:e6:db:0a:d8:
22:95:b0:5d:27:cf:78:73:95:35:59:40:e8:0d:c7:
28:91:c0:71:0a:67:30:88:3b:40:55:bc:44:9e:2e:
5a:11:a4:a7:ba:9f:ba:73:7b:10:eb:36:a5:12:e4:
12:ac:6b:85:27:0e:b1:e2:27:64:69:54:90:1c:15:
82:55:cb:59:f1:1d:64:df:5d:f3:2a:c4:f7:a7:a0:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E3:21:3E:D9:1B:7B:41:FA:7E:52:BE:C0:E4:23:83:F1:BC:3E:02
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.173.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b4:ba:e9:95:e7:b7:25:f7:ee:4c:95:06:0e:d3:72:ea:89:1e:
66:9d:dd:cd:83:d4:21:8a:59:51:62:e4:26:37:89:a5:dc:9b:
bf:8b:25:72:cf:54:2f:4b:72:96:db:21:ba:27:10:00:65:be:
37:f1:bc:f1:3e:a1:48:fb:5e:41:e9:9d:82:4d:a6:0e:80:f2:
51:01:99:1e:8c:0c:64:1a:4f:1b:4f:0b:e9:53:67:6d:a2:d2:
ae:0e:b9:25:96:b5:bc:15:be:e6:2f:86:02:7e:52:bc:bf:f6:
16:a1:f9:d1:ec:b8:32:25:f3:f9:17:3a:46:36:f1:6c:74:b9:
49:6e:72:08:90:52:5b:99:6d:10:db:a1:92:6e:ae:e8:40:16:
7f:77:f6:17:80:0c:da:31:67:42:51:7b:de:65:34:7c:f7:9c:
4f:6e:da:64:11:06:ac:5e:59:b0:0c:4e:5b:9b:c6:67:04:62:
9c:80:f9:4b:e3:96:ba:69:b9:71:5b:90:48:7d:e1:6b:02:a0:
1d:b7:3d:00:d3:71:b9:b1:43:18:5b:c7:b6:14:06:ac:a1:ec:
04:71:51:da:42:8b:23:6f:70:04:d3:17:aa:37:28:11:ab:44:
9a:34:97:f0:f7:ca:0c:71:54:59:05:dd:21:8f:94:5f:4b:21:
18:21:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:33:45 2025 by rpki-client