Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa
File: 49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa (raw, json)
Hash identifier: vJOfcKk1jU9hu8wfQQtdDZ74kEowkBzwkHTar5JJLfY=
Subject key identifier: A9:2B:60:8C:C1:3C:29:D8:E4:07:2D:75:9C:37:1A:26:59:77:38:03
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3327AEA2905055E28C4481BA052086CABB793ADA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 195.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:27:ae:a2:90:50:55:e2:8c:44:81:ba:05:20:86:ca:bb:79:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:9d:7a:7e:f3:2d:8a:23:44:77:6e:25:8b:
ec:44:e9:bd:7a:a5:19:b6:5a:2e:ab:45:85:28:13:
00:fb:67:06:fc:a1:16:1a:38:e5:cf:50:e5:02:c8:
50:37:af:95:88:25:25:bc:e4:01:f5:88:79:1d:f2:
54:8a:9a:bf:44:55:d6:d5:4e:6b:2c:2e:c4:21:42:
7a:f7:a0:01:fd:41:dc:f3:51:4a:d7:1f:c1:26:3d:
9a:de:9c:03:1a:73:75:56:d2:14:88:d6:6f:cb:db:
8c:45:5a:fc:69:a9:dd:f9:a3:0d:84:16:b8:d2:e8:
0b:be:bd:b2:ab:ea:76:2b:47:33:e6:55:d1:6a:cf:
ec:73:ab:5a:27:d9:ad:e2:66:2d:37:d7:8e:cb:2b:
47:8c:f8:c3:4e:ae:bb:e0:3b:0c:38:c4:bf:2b:aa:
6c:67:d3:b6:ca:de:b6:34:d4:8a:21:aa:06:be:ad:
90:1f:a0:e9:27:5a:d6:a5:71:dd:3a:b9:33:9e:12:
42:42:56:62:cd:72:7d:0e:40:93:18:d7:df:c1:47:
e2:f1:f6:3e:f6:30:ac:02:e9:45:ad:47:fd:d2:c7:
ef:e8:71:65:aa:b7:3d:25:fa:f2:40:e4:e1:cd:5a:
bf:62:18:fc:ab:96:88:a6:0a:3d:24:3b:b2:ba:83:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:60:8C:C1:3C:29:D8:E4:07:2D:75:9C:37:1A:26:59:77:38:03
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49016cf3-23c5-4b17-b3e9-1c36e6cac1e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:8c:44:3e:52:53:e9:44:5c:96:af:7f:52:f1:f1:e8:60:5b:
ff:04:f1:23:e9:a2:1b:4e:4e:ae:95:c8:42:da:18:52:56:37:
4e:61:11:67:16:dc:ee:e9:d3:b7:82:f8:53:6f:0f:17:3f:09:
55:e4:02:89:b2:18:d9:af:cf:ee:ee:6b:38:27:08:bd:f3:51:
2a:2f:fc:9a:31:15:15:5b:cb:30:ff:85:e5:1c:fc:7e:77:41:
46:28:77:0a:f6:7e:d3:0f:5c:05:ee:32:6a:7e:9d:b4:de:76:
74:12:89:63:cc:30:a8:b7:d2:cd:63:46:cb:e4:82:32:90:7c:
da:d7:3d:0e:5c:d6:05:94:f2:04:4b:61:e9:e3:38:aa:b8:10:
c4:20:bd:29:c0:78:bd:49:9c:7d:ff:93:71:87:f8:a2:96:a6:
ab:ce:03:e0:6f:7b:d4:f6:45:8f:c8:d0:b5:d5:c4:29:29:ae:
ff:33:44:a3:3f:65:72:54:a0:d6:f3:eb:95:e3:53:61:70:1f:
4e:a8:1a:98:b4:37:14:b6:fe:99:c9:0b:95:0c:86:2e:a7:3f:
de:f0:af:dc:69:0f:7b:7d:8f:ce:5f:ed:d7:5f:69:2d:ac:c5:
4a:69:fc:22:8b:5e:6c:a0:f2:94:33:71:23:e4:12:da:03:fe:
7b:e9:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:39 2025 by rpki-client