Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
File: fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json)
Hash identifier: sGNZ+xwXSNjBNaY/d6c6z9ryEPOHVwTKa/gnOH24xkA=
Subject key identifier: 7B:EC:D7:49:50:7E:6B:ED:0F:65:E8:10:55:B2:F8:BD:98:A0:B0:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6E3CA8117162EFAEF99DF35BA2DA81AE77AEA157
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3c:a8:11:71:62:ef:ae:f9:9d:f3:5b:a2:da:81:ae:77:ae:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=1b8d103523c3500b621f283ab000225c7813d09ec8d84c6f4adac8da7242266f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:0d:3c:85:a4:b3:cb:8c:d0:f9:ca:97:59:
4d:21:6b:9a:4e:f5:47:d6:e0:b6:21:a8:ee:22:95:
f9:85:b8:2e:6b:9f:f3:b6:b4:34:06:81:e0:3e:b4:
f8:65:6c:b2:95:10:8c:e7:4f:96:84:0f:8a:94:81:
22:3e:f5:2f:7c:05:34:4a:3b:27:3f:78:f5:1a:7d:
ac:81:1f:f1:e2:05:b7:33:73:5b:d8:69:9b:bb:0e:
10:e5:01:c0:d7:f9:8d:ef:a0:3c:21:d5:b6:cf:17:
08:99:74:f8:93:3e:2b:06:ed:51:61:33:e9:61:02:
30:47:c6:cb:f1:0e:9c:e8:ac:43:b7:8b:8e:df:86:
56:ea:3f:0f:92:93:05:ad:01:33:7c:0e:7f:62:19:
e8:4a:dc:16:22:d4:c6:87:c0:32:89:bc:a0:c2:07:
6a:0a:ab:3a:f7:3f:00:77:14:82:05:8d:e0:c8:d1:
db:4f:55:6f:00:d6:3f:66:d0:07:b3:8d:10:8c:db:
03:35:0e:c9:58:8e:04:5d:7f:c5:b0:e7:86:13:31:
ba:5c:32:c0:b8:70:ad:8f:e6:16:ec:54:a0:41:eb:
7e:7a:6c:f7:12:eb:55:23:bb:ae:a3:a4:53:70:2b:
27:ed:05:91:79:64:9b:1e:6e:8c:98:d9:1a:57:95:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:D7:49:50:7E:6B:ED:0F:65:E8:10:55:B2:F8:BD:98:A0:B0:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:87:68:db:12:8a:d6:98:e0:d2:01:e5:2e:af:fc:42:77:f0:
bb:79:b4:b3:2f:cf:f1:b4:76:8d:a7:18:1e:94:ad:67:79:6a:
12:8a:8e:c0:c7:f5:ff:a0:0b:2b:51:0a:4f:5c:64:78:73:ab:
33:15:07:a8:d6:17:57:b9:ce:0f:11:60:36:41:b6:4a:0b:83:
1a:fe:d3:f3:e8:bb:df:bb:ac:be:6b:7d:41:26:28:76:4f:49:
73:b7:4b:dc:ef:0a:0a:ef:91:b5:81:cc:8c:9d:1b:18:33:77:
03:a5:56:dd:41:a8:4f:f9:7f:84:4c:61:13:a8:4b:3e:be:3b:
0b:82:40:77:db:57:fd:d7:25:26:0a:99:e5:a1:ab:e4:24:0b:
98:d3:6e:98:f3:4d:1d:18:94:da:5a:fb:7b:f8:e5:c5:35:6b:
4b:23:ec:55:e8:5c:87:db:6a:86:72:a2:5c:c1:2e:78:fb:6b:
18:af:cf:f6:f3:07:27:85:52:d7:08:43:0b:b6:48:6f:a4:6f:
67:0f:73:fa:04:16:ce:1f:08:62:45:46:5a:b6:69:82:d8:8e:
e2:88:90:a4:70:b9:a0:5a:d9:5a:f7:10:9e:eb:74:87:88:a2:
32:62:f3:fb:d7:7f:5d:f9:8d:df:62:b3:26:98:41:a2:ca:f2:
38:c4:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:36 2025 by rpki-client