Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json)
Hash identifier: Ac7dQRgNKei9NgVBNIRvxD/gBgYQrbKfcfb+PZ1Oq/k=
Subject key identifier: B8:9F:B1:52:54:E1:DC:F4:F0:F7:9F:AB:1B:87:DB:8F:BD:09:99:CE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6F16AD5ADCDE6D7308E2C5A27F69B0F55F68FA0C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:16:ad:5a:dc:de:6d:73:08:e2:c5:a2:7f:69:b0:f5:5f:68:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f99de2fe9a5172738bd39f89ec03458d41e59940cfa80a7f80d29c5fc194d796, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:81:48:76:84:42:4b:ad:33:44:ed:bf:ac:
c7:96:65:04:69:4b:d1:97:08:45:1a:df:b0:5a:74:
2c:2b:28:b8:89:a4:46:6e:e8:3c:65:f8:92:3e:52:
c1:5d:1c:d2:d5:7a:16:64:7f:40:86:16:d9:8a:07:
b7:eb:01:8d:11:96:3e:b2:11:75:9c:e9:9d:a1:cf:
e6:ec:68:cb:9f:ff:2c:60:85:42:4a:c7:77:0a:2d:
ad:2a:bb:ac:c7:d1:ce:0e:0d:33:8d:87:b6:05:7f:
70:45:bd:ed:c3:87:13:8c:c7:fe:a7:52:78:bc:21:
89:22:70:fd:9d:cc:95:bf:9d:08:83:8b:81:c2:1c:
29:bd:7f:ec:02:0a:eb:f4:d7:42:b4:03:0a:3d:ad:
c7:40:56:26:a9:0f:f1:ae:6f:4d:08:5d:8e:f0:23:
54:b0:6c:4d:6a:71:d5:cd:95:aa:0d:8b:00:43:15:
94:37:74:d2:ea:e2:d3:93:fc:38:0d:6d:c6:8c:6d:
12:c4:9e:8d:41:90:11:40:3c:9e:7c:1c:4e:75:55:
78:97:c1:c8:81:a5:8e:55:0d:fb:77:e7:4c:45:8d:
22:a6:2b:79:f6:02:b0:4d:89:74:da:a2:e4:d8:c9:
eb:5f:56:9b:1b:e4:30:e5:ea:7f:e3:ca:bd:49:38:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:B1:52:54:E1:DC:F4:F0:F7:9F:AB:1B:87:DB:8F:BD:09:99:CE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
95:52:5f:74:76:f2:82:49:67:ae:03:d9:de:a9:b7:1f:ac:fc:
e2:e5:21:19:fa:84:90:b3:a0:a6:26:c6:fa:b7:45:cb:c5:db:
b2:ec:90:b4:d3:51:10:fc:1d:e6:7e:31:33:e7:7d:9c:f1:39:
d9:72:69:ab:13:c1:9c:6a:b8:79:7e:46:e7:4f:b3:41:e7:3b:
de:04:af:66:8b:de:fd:04:fb:12:3d:f3:7e:0e:d4:d5:77:e3:
07:af:02:4d:2f:21:5f:51:ff:d6:5c:9e:04:c0:80:ed:78:63:
bb:2d:22:c3:97:27:fc:ef:ee:90:f8:a3:81:bb:58:6a:5e:22:
8a:e8:9a:5f:95:b2:9b:1c:fe:ed:46:b4:27:c7:44:7e:e0:78:
00:29:9b:21:69:65:60:ae:04:a2:70:54:c3:a1:64:61:6e:a1:
a2:89:1b:cf:31:44:c9:ef:95:34:e0:5a:f3:b5:a6:d9:48:5f:
ea:da:a2:70:45:be:52:84:5c:39:ad:98:9c:42:8f:1e:b4:f2:
6e:98:3e:02:4e:97:99:81:42:50:b7:0d:7f:19:8a:1c:dc:0c:
11:24:0b:51:97:11:ae:ea:60:69:76:2a:3f:ca:7b:bb:06:d7:
18:a8:26:c1:34:11:5b:e9:a0:5f:d3:f7:a6:64:fa:32:ae:3f:
56:4c:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:37:14 2025 by rpki-client