Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e3a37277-f023-468b-8a43-2519fccedc3e.roa
File: e3a37277-f023-468b-8a43-2519fccedc3e.roa (raw, json)
Hash identifier: UpxqDhRFh5PTSrMjKCD6Wr5SwKHB85AoQvOZ003DGQI=
Subject key identifier: A7:B0:20:8F:9E:4A:56:35:05:18:02:49:16:7A:3A:C6:2D:C7:4B:B2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 26F767ED6E5AB06E0782660381D871B91751413C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e3a37277-f023-468b-8a43-2519fccedc3e.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 85.213.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f7:67:ed:6e:5a:b0:6e:07:82:66:03:81:d8:71:b9:17:51:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=7bdab5defcec0c23dab4684dfdf75a2edd915e931d493bf49b9749635d291d0f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:2b:97:45:1b:e5:61:b0:32:2c:d2:86:6d:
62:6a:ec:de:41:87:d5:92:f7:f9:87:e9:b9:dd:7d:
c7:73:0f:14:e4:31:f5:ce:76:69:23:d1:82:fb:15:
85:28:c3:a1:ac:5f:ad:78:c9:ff:a5:91:8c:2c:02:
c0:59:b8:d7:b2:a6:ab:74:7b:a8:de:0b:f7:9d:3e:
a2:a3:27:09:7c:a2:29:10:65:27:bc:90:5b:c6:f7:
db:63:5a:2e:8d:d0:d4:3a:63:eb:1d:d9:4a:b9:d9:
33:45:34:f6:1f:71:b8:a3:18:d2:bc:c7:0f:62:19:
bd:99:d9:5d:37:3d:02:08:53:11:26:9f:ce:91:f4:
5c:b0:b7:0a:14:3f:fb:07:5d:20:e2:9e:70:59:42:
87:fa:44:a1:ad:4b:7e:94:f5:6c:aa:bb:03:04:6a:
ca:bb:3e:fd:b9:9e:4c:6e:db:ce:05:22:9e:d5:28:
70:5b:d6:40:e4:e4:78:53:5d:ca:42:88:f2:7b:54:
71:63:5d:59:ba:a2:e4:71:a0:80:c5:23:7d:06:8d:
f6:fb:82:5b:ee:ab:76:0e:b2:fb:da:0f:07:3c:62:
24:87:11:4b:1b:24:a4:97:ab:d8:2d:c4:0e:ad:b6:
a5:b6:c5:f8:68:5d:ca:b7:30:02:0b:d9:ed:a3:b7:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:20:8F:9E:4A:56:35:05:18:02:49:16:7A:3A:C6:2D:C7:4B:B2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e3a37277-f023-468b-8a43-2519fccedc3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:27:56:84:18:00:bf:ad:80:84:18:60:c4:02:5b:05:a2:65:
12:a1:b4:18:06:3f:3f:ea:a3:47:24:f8:7c:3f:8f:0f:79:e5:
59:88:a0:56:74:8c:02:bb:6e:04:e0:d9:e5:b8:32:99:5f:62:
6d:20:dd:39:dc:e0:51:6c:5e:82:d0:c4:3b:ad:09:69:29:5a:
1b:87:f5:28:19:fa:70:6a:10:c3:f2:2b:9e:ff:94:41:bb:c1:
28:b1:c3:4b:fa:99:b0:01:15:7f:f0:24:19:c1:c1:f4:eb:0e:
67:d8:6c:90:a2:0f:76:5e:0e:d8:83:63:42:c7:fb:b9:51:ef:
fd:ab:0c:fb:05:20:2f:5e:9c:f9:f3:4c:f6:1e:ef:76:b5:26:
bc:7c:b1:79:d3:e2:88:f9:a3:d7:a3:cb:2b:ae:15:7d:a3:5b:
d0:d9:7e:f9:c2:5c:a0:79:0a:32:16:73:36:0f:5a:fb:d9:2f:
c4:49:50:a6:e9:db:11:ca:bd:1f:ef:73:f8:70:be:ea:d7:36:
b0:0e:c6:52:a6:20:aa:1e:7c:f9:eb:f2:aa:ab:69:f4:fb:7a:
17:18:07:46:95:fe:fd:60:62:2f:2f:60:ac:02:2e:7a:9b:58:
00:63:57:85:0d:5d:eb:4f:08:05:09:49:d8:3a:3a:15:fc:fb:
39:fd:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:42 2025 by rpki-client