Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
File: e6379fd6-eaa8-4348-8280-afb9b8552668.roa (raw, json)
Hash identifier: 1kwF/nUUivDmEZh3wmDbrbHzWcelhLUiC1n5ZP3RBCw=
Subject key identifier: 4E:BE:C5:C4:7F:E1:CE:7B:EE:93:01:C1:A7:E9:F7:FB:65:5E:D3:7C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5CED5558B4C2D0541A650A88C461A4BA0E68460F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 7224
IP address blocks: 83.118.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ed:55:58:b4:c2:d0:54:1a:65:0a:88:c4:61:a4:ba:0e:68:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=f0cedf59ecd3f29860141f1b691957fc91afa1725a2b12d510c16991c01a915c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:00:d6:14:f5:1c:a7:83:db:3e:75:b3:0b:
b5:60:14:04:00:c4:6d:dd:e9:c5:35:8e:1f:a7:7e:
67:03:b5:36:9b:e9:7e:88:dc:fa:07:6b:fd:7b:2e:
55:7c:2c:fa:df:6f:3a:96:50:48:6f:31:30:d1:60:
02:7c:51:44:0c:ba:9c:b7:6e:99:de:b5:f2:f9:7c:
aa:e1:f7:07:4b:fe:f3:48:94:5b:40:3e:ef:66:23:
92:da:70:47:67:1d:5a:7b:c2:55:8c:1a:e0:26:96:
18:1f:fa:32:4c:ed:b4:c4:68:86:bf:52:ab:7d:75:
d7:c0:1c:88:28:c9:d7:7d:c9:85:13:f8:05:55:a7:
60:9e:ed:00:c1:3e:18:b1:1c:1e:39:10:a0:a0:4b:
47:1a:50:8d:57:67:37:66:82:a0:f3:e9:fa:b3:4b:
02:d8:eb:4e:7f:88:8a:88:15:67:b8:c8:26:5f:53:
c0:bf:c7:d3:b7:70:61:f1:49:0d:30:57:c3:23:db:
cf:97:03:8c:2b:41:23:ba:67:f0:51:5c:4d:b5:ba:
24:80:f8:a0:5e:04:f1:f3:2b:c5:87:f8:48:63:bd:
02:1c:06:94:9b:f5:80:7b:aa:98:65:0b:0b:51:58:
bd:00:35:5d:b2:99:d8:0f:fc:83:1d:65:e4:83:a2:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:C5:C4:7F:E1:CE:7B:EE:93:01:C1:A7:E9:F7:FB:65:5E:D3:7C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:29:4b:2a:78:51:75:7d:c9:94:22:3d:a6:1e:44:03:79:50:
b9:2f:93:cd:7b:1a:48:7e:7a:9a:09:0f:c7:b1:48:18:56:71:
09:4b:0f:ae:ce:15:e1:5c:70:74:62:96:89:6d:83:a8:70:4f:
ec:ea:64:7c:06:d5:51:a9:76:e8:43:01:6f:46:23:63:e5:bb:
a9:f3:49:13:fa:27:69:bc:4d:b6:a7:c7:64:59:fa:07:24:04:
bf:42:c5:a0:09:87:4c:73:83:0f:62:b6:32:45:06:fd:dc:bc:
ea:c6:44:37:ca:93:72:7a:61:3e:51:06:1e:a0:4c:8e:e7:d0:
a8:98:50:79:b0:77:2d:b5:ab:cb:02:b0:ba:6f:9e:3a:fe:90:
f5:28:74:d7:3b:5a:3e:92:f0:7d:f6:9e:bb:97:75:fa:7a:3e:
b6:3c:f4:b1:ca:c0:00:ca:c2:f0:34:5f:4f:4f:48:ae:6e:61:
72:df:93:21:46:ed:3a:54:2d:c8:ef:a6:7d:4b:3c:cd:d9:8f:
e2:9b:27:5d:c3:e4:2d:6f:52:6a:77:c3:1b:db:5b:c0:97:7b:
b6:b1:9c:18:40:61:14:5e:23:7e:a7:6d:f7:59:6f:f0:3e:e1:
a5:c3:b1:96:eb:23:2f:73:16:f7:f0:a9:73:10:8b:c1:31:38:
b2:d2:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:00 2025 by rpki-client