Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
File: 2dbc9912-b766-4000-9f7c-cb9e37916980.roa (raw, json)
Hash identifier: 3yd743TtDfrOK3VjMfkV4xcVpBaUOMWjembodTcnJ7A=
Subject key identifier: 31:DD:AD:89:03:3A:4A:12:C1:AF:DE:2E:D1:12:54:65:BC:0B:D1:7C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 40BE402BBF42489628BEC30DAD6F505BC619BFAA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
Signing time: Tue 18 Mar 2025 17:10:07 +0000
ROA not before: Tue 18 Mar 2025 17:10:07 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:be:40:2b:bf:42:48:96:28:be:c3:0d:ad:6f:50:5b:c6:19:bf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 18 17:10:07 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:33:81:37:a1:ca:a4:59:9b:c3:f6:99:56:
d5:7a:58:3d:0c:28:1d:90:cd:4e:d1:61:5f:0c:ae:
5c:48:46:55:b8:65:35:96:94:c3:ac:80:7a:cc:df:
7a:83:fb:ce:3f:d5:b4:cf:83:4a:54:f7:bf:c7:cc:
9d:89:ce:4e:a9:d7:de:2e:09:0d:f8:64:c3:16:19:
c8:d7:50:e9:a8:91:2e:79:52:c0:77:31:c4:8d:1a:
a7:19:44:54:63:ed:0d:9d:41:4c:cc:52:54:6b:49:
c5:23:33:1b:d8:d9:da:0d:65:34:a2:b8:21:cd:04:
ce:c2:ed:03:79:69:ad:09:de:78:cf:bb:77:ec:46:
c0:d9:bc:2e:1f:33:32:7c:6c:e5:4c:f6:4a:db:44:
19:92:63:b5:f5:d0:25:3d:0c:f3:6c:63:38:4d:37:
75:55:01:c0:ac:7e:b1:4c:06:d1:57:25:90:f4:ce:
6d:9e:d3:11:48:b4:2c:39:cb:9a:25:26:91:2f:31:
00:4e:5e:41:f7:3c:1e:be:41:dd:30:a3:f3:40:a5:
fe:82:ea:6b:f8:7e:45:22:02:1e:2c:2f:e3:df:d4:
3e:4c:1c:63:e1:01:ee:28:2d:fa:ef:e2:86:d6:d2:
d6:5f:9f:84:17:0d:7a:07:fc:13:f8:0e:85:30:4e:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:AD:89:03:3A:4A:12:C1:AF:DE:2E:D1:12:54:65:BC:0B:D1:7C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/18
Signature Algorithm: sha256WithRSAEncryption
73:64:4c:17:4d:21:f9:be:e7:8e:1b:f4:1d:d8:5b:11:c6:0a:
77:8f:84:5d:52:75:38:7a:8c:5a:fb:ae:ea:28:75:58:49:68:
09:e8:e3:b2:f9:33:be:ad:12:0d:8b:b1:fe:ee:f6:ac:58:69:
90:51:9d:3c:12:b6:ec:5e:52:82:79:c4:5a:70:be:9a:b2:8d:
57:0c:b7:a2:c5:68:70:71:f9:78:0f:3f:03:87:fa:77:c2:3f:
71:bb:75:ec:84:ce:fd:0e:15:f0:1f:9e:7a:4e:af:7d:af:de:
c2:14:4f:24:19:3a:f7:e3:7a:88:4b:b0:1e:84:ca:14:64:1d:
36:d0:14:6a:dd:07:47:aa:74:dd:82:02:4b:78:c2:df:3b:50:
d2:44:f5:f2:34:bd:f0:92:f7:65:eb:7b:42:c0:6b:2d:b1:01:
d3:f0:5e:4b:d9:5a:b6:a2:e0:e6:e1:f7:53:a4:4b:48:39:49:
94:3e:d0:3c:af:5f:8f:94:ed:10:e4:a8:01:c0:5c:45:36:4b:
4a:8a:02:d6:c3:70:f4:39:73:83:05:7b:6e:fb:63:c4:9e:07:
94:54:d8:80:9b:e2:1c:76:00:b3:c5:d2:76:ef:42:95:5b:5d:
9e:f4:9e:3b:c9:ea:e4:5d:3c:b9:7e:d8:58:5f:4c:57:d6:c7:
b2:74:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:10 2025 by rpki-client