Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
File: 2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa (raw, json)
Hash identifier: wwWFOKsNlRZRrtx3SdUmvXUhH23fxfXdzjcXb9iKzH0=
Subject key identifier: 24:CF:95:9C:4C:18:5F:67:9C:96:9F:00:58:2B:09:CF:5A:9F:FC:DF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2A60BCAA10270659130EB623FE98BBC061CDF266
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:60:bc:aa:10:27:06:59:13:0e:b6:23:fe:98:bb:c0:61:cd:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:9c:47:ff:d6:16:fa:2a:10:71:d7:cf:ea:
19:dc:b2:1a:23:b4:8c:18:35:0d:2a:6e:13:dc:1a:
56:0f:c5:c3:4b:82:ed:c7:e0:a0:c2:bb:8f:78:79:
39:a6:0b:c7:b7:15:05:b1:e0:a5:11:13:dc:1e:f9:
de:97:44:b2:87:83:c1:0c:21:50:c4:0b:8b:14:78:
bb:0e:ef:29:34:4c:83:8e:31:33:7f:e0:bb:0d:1a:
ac:9a:8d:0f:05:e4:7b:af:cb:37:c3:31:cf:c1:2f:
85:86:27:f2:e8:cb:86:d8:70:1d:94:bb:0f:bc:9f:
e0:07:df:0a:aa:0f:87:a9:d2:72:49:8b:87:b1:49:
ff:92:52:ed:e8:6f:7d:03:8b:50:0a:a2:e5:d5:06:
e8:aa:47:f7:19:89:4b:29:d9:cd:7c:44:c9:6d:8b:
a0:b5:d1:c6:09:4b:48:29:36:4f:18:43:d4:27:2a:
f0:4d:a4:6e:e3:5e:85:ae:37:f8:b1:ef:94:88:69:
c9:ea:ef:40:7a:6c:09:65:27:db:9f:76:07:9e:1e:
84:6b:9c:f6:58:fd:55:cb:0b:ff:b6:f4:0b:01:cd:
32:bd:59:b2:f9:1b:bd:e0:34:44:03:ab:be:f4:d6:
0c:a8:f1:9a:3b:6b:f5:56:de:4b:1d:dd:15:19:dc:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:95:9C:4C:18:5F:67:9C:96:9F:00:58:2B:09:CF:5A:9F:FC:DF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
61:74:1d:d3:f7:c8:72:6e:0c:47:57:15:80:c0:12:25:58:fe:
9b:85:03:77:4d:dd:03:4e:4b:11:05:38:29:77:5f:35:ce:b1:
92:f9:84:ff:e5:b7:6a:e8:6e:2e:60:7a:20:5c:61:ad:0a:32:
65:77:37:62:e7:bc:d8:63:e4:e7:1b:8c:55:4a:fd:03:6d:9f:
88:e5:2c:29:c2:56:7b:88:20:8e:95:38:d6:e4:64:ce:1d:0d:
e5:91:bf:16:63:26:a2:58:2d:d2:e5:a3:07:c1:cd:4d:b4:33:
07:92:3d:fb:3b:48:05:ec:09:7e:cd:54:96:fc:1d:09:0b:76:
19:a4:4f:b3:a5:7a:52:0d:a7:ae:7b:30:ca:c4:6b:b1:16:88:
5a:8d:c7:b5:97:08:7a:a7:26:b0:ef:17:30:5b:04:e9:95:5c:
e1:25:19:2b:a1:53:15:fd:0c:8c:0f:c2:26:dd:54:96:2e:f0:
65:dd:12:22:76:cc:76:a9:c8:3d:34:4d:0d:4e:a4:21:c6:1b:
21:94:05:af:ef:f4:0d:ea:3c:cd:e3:6f:bd:dc:cc:1f:07:9a:
d5:cf:00:db:d1:35:d0:5d:01:e9:ed:bd:74:03:a2:29:23:e0:
53:37:31:5c:60:61:0b:c8:73:2f:74:87:23:c7:0b:90:0f:b9:
09:eb:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:04 2025 by rpki-client