Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
File: 248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa (raw, json)
Hash identifier: qYbHcKJaA/ofWa5iW/Hdw8qWbcPtjEgu3ZLhVNB+7wM=
Subject key identifier: 69:C7:AF:07:F3:22:84:F3:EB:B8:F0:C8:B5:11:34:2F:59:29:1C:5C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 741BA8DEACEA4CD2474C6FF810A990BC1A11A22D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1b:a8:de:ac:ea:4c:d2:47:4c:6f:f8:10:a9:90:bc:1a:11:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:51:8a:32:2c:ed:1c:f4:6a:cd:1b:54:a3:
43:55:11:44:7b:76:a6:0d:eb:10:47:96:a4:07:d6:
d5:1e:b5:f0:a7:d5:4b:7b:aa:2e:55:3a:1b:9b:76:
b6:48:04:d0:70:15:60:87:3a:d3:c6:6b:f0:9e:6d:
2c:cb:16:cc:f7:1a:02:03:d9:b0:af:73:a6:3d:cd:
49:69:ee:c4:c0:fe:e6:bb:4e:a3:9e:3a:39:76:1c:
69:2d:ce:60:a3:f1:83:f9:f9:db:46:b3:93:46:78:
08:b0:f7:8b:4b:3e:74:4c:0e:b7:45:46:9b:31:ca:
5c:b1:4f:39:30:70:31:e2:e0:97:44:43:c2:14:d8:
92:07:d3:3e:b1:b0:83:35:44:f1:b5:65:c6:80:10:
ac:af:a4:22:95:92:fc:88:c2:40:ea:79:f1:1f:90:
c3:08:70:11:5c:be:13:f8:53:67:9f:92:f2:6f:6c:
68:29:36:52:77:6b:15:6a:32:ea:5e:c9:d9:12:4a:
e6:41:74:68:e0:b0:15:80:4e:97:5a:90:43:5d:fc:
f5:f4:72:63:b5:c2:a3:5a:13:ce:21:41:2a:60:50:
2c:cb:ef:93:ad:cb:5d:ed:5f:c2:34:b7:48:51:27:
6b:b4:4b:00:1a:ee:3f:0a:8b:a9:2e:51:d0:8e:aa:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:AF:07:F3:22:84:F3:EB:B8:F0:C8:B5:11:34:2F:59:29:1C:5C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a0:d2:bc:8a:c3:a9:05:1d:f0:a1:df:a9:ab:30:be:6a:b5:25:
97:77:9e:a2:9c:6b:e0:b9:c2:17:09:be:cb:6f:8f:08:48:4f:
7b:29:d3:41:37:2b:3a:eb:a7:ee:01:7d:84:b3:55:0b:46:05:
3c:b8:03:82:21:04:d1:63:2e:c8:ae:cc:19:3e:db:9f:3c:f3:
96:89:44:67:ab:b1:aa:c3:18:42:df:75:8f:95:61:96:96:ff:
c8:4c:16:36:4b:9c:79:79:8e:5d:1a:9c:ee:65:66:9f:61:e6:
bf:3d:a4:2b:80:40:b7:38:38:66:40:f3:88:58:8f:d4:5c:ff:
7e:e7:d2:da:43:af:3a:f6:46:b7:11:42:eb:68:b8:6d:20:a3:
52:d4:27:8a:9e:15:60:59:fe:9c:8d:37:cc:fd:91:7f:f0:66:
ac:53:1e:dd:76:80:90:9e:b3:58:75:74:04:02:ca:79:e4:87:
82:26:b4:7a:14:cf:5c:26:e5:48:21:1c:46:ce:4f:b8:58:ca:
ac:5b:61:b7:e1:62:c7:b6:c9:77:c7:95:8c:14:7b:d8:2d:b9:
38:84:f0:ac:86:e0:b9:cf:3a:f9:07:08:7f:4e:81:a9:19:0c:
d9:5c:62:1a:8d:04:3f:4b:54:a6:f0:d6:63:83:55:bb:ed:53:
93:13:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:59 2025 by rpki-client