Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
File: ff2e2d46-44f0-4790-a453-0090beda0015.roa (raw, json)
Hash identifier: 0q0pjppS6GdZF7WPF4yZaqcORbTtHzivM70lJSnVP8E=
Subject key identifier: 82:4D:97:C9:21:10:B3:88:B2:A2:75:39:AF:61:12:34:34:EC:6E:36
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2112E8837476666D81574D319410DEAED24DC999
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:12:e8:83:74:76:66:6d:81:57:4d:31:94:10:de:ae:d2:4d:c9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0ab9fb976c976127b70c94edfd26bf87d3de6f76df53b98f240a59e1ac46fc78, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:5c:a8:48:80:ee:02:c9:0e:bb:a3:15:cc:
8e:df:5e:a3:99:60:f8:b5:68:30:c0:f7:23:dc:b5:
44:0b:ef:ce:c6:d7:30:87:00:1c:8a:50:2f:60:92:
d5:79:90:bb:92:f2:b3:0c:58:dc:8e:29:71:7d:9b:
4b:9a:40:1d:a3:4d:34:c9:f9:32:c3:15:27:42:5c:
22:af:3d:71:30:e2:ed:1d:5c:03:46:7d:ad:f9:96:
7a:06:dd:2e:0d:34:a1:5c:bf:ed:67:b6:dd:8d:d1:
0c:cb:81:a7:78:0a:2d:9d:55:47:bb:f1:b3:3a:10:
4d:b2:10:ab:e8:a1:11:78:72:26:21:2d:54:e0:9b:
e6:40:80:49:c4:f9:73:e9:6c:12:6a:69:9a:02:a3:
fc:a0:f6:6f:3a:af:4a:c2:62:7f:9f:cf:84:03:79:
6c:80:31:21:92:56:05:61:4b:4c:4e:12:d4:dd:5a:
2e:d9:5c:15:c9:0b:22:e3:b7:62:88:df:07:a1:ff:
76:77:56:6f:fa:d4:28:3e:6f:2e:66:0d:ff:13:4c:
75:f8:46:79:31:70:b5:ad:84:f9:69:d7:76:cb:da:
0a:c9:83:fd:b3:13:01:c4:24:ac:06:38:37:2f:b5:
b3:1f:d2:48:6a:7f:02:0d:c8:b5:99:d5:53:f8:ce:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:97:C9:21:10:B3:88:B2:A2:75:39:AF:61:12:34:34:EC:6E:36
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:77:bc:bb:aa:b3:17:0c:44:46:86:8b:2e:8a:40:f8:15:be:
bf:7f:ad:e4:53:b6:7a:c5:72:f4:bc:9b:bb:3e:98:29:37:41:
0d:5a:c7:b6:ff:8f:c1:7e:eb:9b:9d:75:03:cb:ad:c9:f2:c8:
a3:56:57:e9:4d:9c:1e:f9:f0:09:ef:66:9b:b9:5e:10:23:f5:
ca:f5:f7:65:45:f4:8b:81:a1:1c:3c:f1:65:bb:e6:1a:3d:c9:
8a:0d:ec:11:b7:57:3a:a5:2c:a5:0a:f2:7f:f7:0a:e8:df:30:
65:fe:99:42:61:32:85:4d:04:52:56:cb:77:97:08:9d:da:93:
fa:b7:74:ed:2f:59:71:a1:f9:f6:6f:e2:2c:de:b0:e9:b0:01:
23:db:b5:78:09:09:47:f9:6e:cd:19:d1:d2:36:47:d2:f2:61:
0c:53:0e:3e:d8:d0:ab:90:2f:a9:41:04:ac:f4:80:1d:31:d7:
f5:11:71:95:e0:87:3e:41:35:d4:01:78:ee:d2:3a:59:21:ee:
11:1f:64:e3:a5:89:08:e5:ba:72:a3:f4:ba:ca:52:9a:e6:1a:
ef:dc:af:8a:4c:3e:fe:10:fd:63:64:07:b7:b2:d8:5e:fc:65:
59:70:7b:e4:d2:e0:96:1a:70:3a:0f:41:16:aa:a5:04:08:f1:
69:da:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:25 2025 by rpki-client