Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
File: 34e19faa-5cf1-4226-b61a-b6161eba0791.roa (raw, json)
Hash identifier: JFJ1X24sCW+UFcdm+qobvE6dW7FOJZSQT7+XOLg0ePY=
Subject key identifier: F7:E8:0E:61:E0:FF:0B:5B:3E:10:C5:DE:11:7A:FE:A5:62:ED:EC:1D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5AA7758B9214C7D729F0D51E3E12AB7EDBB17FBA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a7:75:8b:92:14:c7:d7:29:f0:d5:1e:3e:12:ab:7e:db:b1:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:97:83:6c:85:ab:96:3e:13:35:7b:ad:4f:
72:d6:c8:a4:88:72:49:cb:98:34:b3:89:8c:c8:53:
fb:47:8d:91:d6:57:93:09:91:53:25:57:f3:39:61:
a4:1a:f6:84:0e:25:70:67:07:0d:db:3a:90:89:73:
55:3a:07:c0:b7:8e:dc:bd:63:67:e3:7b:77:2c:00:
82:98:e4:79:a3:1a:c3:16:40:f9:6b:a2:af:4a:c8:
ec:ec:1a:e0:4a:3d:86:13:0e:cd:84:d5:8e:e1:75:
36:a5:67:54:83:ea:91:19:c7:19:c6:75:55:4d:d8:
c5:0d:65:db:cf:cf:69:45:11:44:d6:67:70:c4:51:
82:92:0e:4d:f7:7d:88:1c:fa:1e:1b:9b:64:cd:1c:
4f:68:d3:c1:94:e3:a6:69:3e:ae:a0:2b:be:e4:37:
71:b2:a7:11:ac:71:16:18:c8:52:55:f6:f7:95:ed:
9c:94:0c:e7:a1:05:c3:01:5a:92:53:f3:fd:f3:85:
27:43:30:c2:2b:3b:02:ed:4f:17:c5:86:0b:3c:15:
23:a6:d6:cf:d3:1e:a4:b8:0b:05:94:f4:a8:12:e1:
38:4d:8c:60:e9:60:da:66:c4:44:19:1c:b4:fc:42:
da:cf:60:20:38:11:a7:5c:81:e9:98:de:bd:ca:df:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:0E:61:E0:FF:0B:5B:3E:10:C5:DE:11:7A:FE:A5:62:ED:EC:1D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:26:93:8a:e8:d4:ca:07:dd:0f:09:95:33:de:41:0e:8d:26:
6c:9c:49:df:f1:c4:3f:03:63:68:3f:38:53:16:ca:5a:16:8b:
38:5a:48:7c:bf:d7:84:86:b4:b1:d3:3e:18:9e:6c:9f:40:f3:
15:c1:b1:44:1e:ec:cd:91:e4:3b:26:38:70:87:80:6f:68:c5:
08:07:bf:32:f4:23:d4:f8:22:80:9f:24:77:d5:5e:c4:f0:24:
7b:40:e3:a4:1a:45:62:a6:86:1c:b0:20:d1:5a:40:6e:67:99:
49:5a:f5:8b:c7:18:dc:c8:50:0d:48:71:8f:83:50:ec:cc:5a:
5c:ee:c0:c0:d0:86:16:f2:ed:dc:6e:e7:ff:c4:23:bf:4b:82:
9d:55:98:58:3e:5a:97:c6:97:9a:9a:82:67:29:9f:89:21:0e:
46:20:f4:6e:4a:1e:16:49:97:fd:bc:b1:2c:1d:9e:f8:1e:bd:
d6:d2:c2:c7:8f:ac:2b:b1:c9:e4:2d:1e:df:37:3f:9b:d3:ce:
72:4a:67:65:ba:02:62:7d:9f:7c:24:48:36:06:4c:84:4d:d1:
8d:b7:9b:d2:91:41:69:92:d5:52:fd:84:35:1f:82:a0:69:ca:
a6:80:39:45:fa:34:74:e9:08:83:24:7d:17:76:1b:fe:2b:95:
bd:ad:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:35 2025 by rpki-client