Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
File: e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa (raw, json)
Hash identifier: J81dgHqYE0dKnlqcLKYgNUPiyhc8nqA7lso/GXxj2SE=
Subject key identifier: 97:C4:C8:55:BF:C9:ED:4C:D4:FA:15:7C:13:C2:FD:B9:C4:3C:CE:13
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5D51429C823E7D9D66246242D151E9BCB936E711
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:51:42:9c:82:3e:7d:9d:66:24:62:42:d1:51:e9:bc:b9:36:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=137aad739a53aed3a8183d02e2a5fa143d070381ffee218b9149f2fc9aff160a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:7a:e8:93:e2:1b:d1:66:ef:de:ec:c8:74:
a1:09:8f:7e:66:5b:78:3a:6d:3e:31:3d:e7:f9:0d:
fc:f9:28:6f:a6:98:b7:30:47:b2:57:6f:fc:24:66:
75:7d:8c:8f:62:b3:f8:9a:2d:7f:61:83:b1:a9:16:
1c:58:29:7a:66:02:47:a8:0e:9a:14:59:58:ee:42:
2d:77:47:34:f9:7d:1b:6f:d6:29:0b:0c:79:29:cd:
52:93:63:3f:92:a3:77:69:7c:c9:a2:c3:3d:f1:60:
7e:86:5c:ef:23:04:6e:ac:ec:a4:ba:c0:bd:46:43:
65:b4:66:84:ac:83:9c:80:e5:f1:5c:44:d4:14:ca:
17:69:69:21:68:81:62:ad:50:bd:dd:b8:01:4b:44:
20:3b:63:87:a1:f3:79:bb:16:d4:31:6c:a0:af:90:
96:9b:0f:be:4a:a8:c7:df:de:8d:71:6b:b8:67:ed:
e2:b5:ca:e4:0c:63:63:8b:a7:18:f6:aa:3c:7b:29:
24:95:9e:92:fd:92:1c:fc:e6:74:b4:e2:e8:97:e2:
2d:03:66:a8:65:b7:ad:3f:b3:65:0e:8c:c5:c5:69:
24:70:bd:05:cf:a3:f7:8c:6a:8b:d3:ff:97:2e:e4:
01:a3:5c:28:f5:26:1c:6d:71:51:24:4a:6b:00:3c:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:C8:55:BF:C9:ED:4C:D4:FA:15:7C:13:C2:FD:B9:C4:3C:CE:13
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:50:d6:0a:83:dd:b1:72:21:d7:fd:9d:c5:f1:4e:84:cb:05:
6b:27:ef:44:0f:30:b4:bb:ed:c1:2a:cd:e2:dc:6f:2a:89:f8:
40:ca:ba:3f:01:cf:38:82:1e:b7:46:c5:e5:8a:69:de:74:7f:
1a:62:80:c5:b4:fb:43:48:a8:3c:ab:c5:e0:01:4d:f9:d6:8b:
5a:b2:89:f5:82:dc:a4:8c:b2:d5:5a:b9:4d:bd:49:87:af:88:
00:e4:ff:71:4b:81:ae:2d:a8:03:fc:0a:06:fc:c1:a4:aa:bc:
83:67:66:14:55:5c:98:79:63:d3:72:79:eb:dd:f0:34:5f:63:
bb:4d:7d:aa:13:dd:73:1b:3f:f7:71:9a:dd:9a:3b:0c:f2:b2:
0e:c3:b3:6f:2b:f4:0d:21:cf:80:a8:ac:fe:b3:b6:96:04:96:
26:56:c0:40:a7:28:7f:ea:d2:03:e3:1d:d9:ce:e6:12:ce:d1:
bc:91:8d:35:8e:fb:ab:d8:24:46:8d:58:6c:66:df:00:5a:9c:
8f:d4:0f:07:ec:41:50:ba:71:fd:f8:ca:c8:12:2c:cb:53:0e:
e7:cc:39:a7:7e:77:6f:bc:78:36:22:3f:36:7a:fb:d7:5d:58:
63:bc:44:48:94:06:52:f2:67:d9:09:15:b3:27:0f:ac:2f:3a:
5b:c7:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:12 2025 by rpki-client