Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5112f144-85b1-4c62-8729-84d86ff353a1.roa
File: 5112f144-85b1-4c62-8729-84d86ff353a1.roa (raw, json)
Hash identifier: 8q449MwKaedelq+Gz3ewFDgqCwLUT3PtafUYiJO/wIU=
Subject key identifier: F3:B4:7F:63:EF:2D:23:99:60:0E:02:C7:11:4E:4B:3E:79:87:F1:46
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6755B47B1AEF812FE33EB0EB6F65188F3999DCC9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5112f144-85b1-4c62-8729-84d86ff353a1.roa
Signing time: Mon 17 Mar 2025 15:40:34 +0000
ROA not before: Mon 17 Mar 2025 15:40:34 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 84.48.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:55:b4:7b:1a:ef:81:2f:e3:3e:b0:eb:6f:65:18:8f:39:99:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 17 15:40:34 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:9b:ff:04:d0:ae:7a:95:3a:63:40:ac:a5:
a7:c6:71:15:c2:d7:2f:8a:82:02:0b:aa:17:6e:54:
85:81:61:f6:1a:43:e0:e2:ca:36:45:de:77:2a:dc:
ab:63:05:37:f9:3f:8f:e8:58:6d:a3:3e:7e:03:48:
b6:75:e8:ca:c7:01:c0:74:dc:0f:ee:83:96:72:10:
e2:ab:c1:8a:5f:44:fe:c7:1c:59:67:87:64:6d:a1:
97:d5:34:a9:63:e2:be:0c:c8:17:e9:06:c3:ba:b7:
cd:f4:e3:23:57:9c:bd:fd:16:17:cd:c1:2a:b3:46:
55:7f:82:70:58:f4:dd:e6:68:23:85:82:6d:e9:6f:
a9:d9:0c:01:53:ad:c2:a7:cb:4c:00:ee:36:df:2e:
c6:1a:2e:96:28:2e:63:57:f3:67:56:c1:37:0a:4a:
8f:cd:34:99:7b:9c:bc:96:50:f9:3c:31:87:88:14:
ae:7f:e2:8f:d0:9b:f7:db:3d:3c:10:1f:4a:75:d5:
1c:2d:1c:14:a9:ce:d1:19:bb:e1:09:08:b9:bb:1d:
fb:86:ba:25:c0:07:40:46:b9:e7:7f:bd:1c:07:25:
f6:a9:05:f2:f1:ad:3c:4f:6e:59:5a:07:09:1d:a4:
0e:89:44:07:5d:91:db:d6:4c:c2:79:79:59:e5:0b:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:7F:63:EF:2D:23:99:60:0E:02:C7:11:4E:4B:3E:79:87:F1:46
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5112f144-85b1-4c62-8729-84d86ff353a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.48.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:d8:e0:3d:94:f4:71:d9:35:63:c2:12:d7:e9:ad:cf:24:ea:
d0:2f:fa:ad:09:67:ac:51:7d:98:a2:ef:23:54:9a:38:c7:92:
8b:55:f2:9c:5c:7c:a6:00:95:69:b4:d6:49:af:3d:b1:67:7a:
93:a2:ba:71:aa:01:cb:22:26:cb:64:5b:45:fb:20:13:8f:49:
32:e2:c4:8f:9d:11:26:ca:86:c9:b6:c0:89:bc:46:27:20:8e:
9e:ac:63:9b:62:01:90:a6:fb:44:f9:a9:23:e4:3a:10:25:44:
68:bd:e5:bb:80:59:51:6a:ec:a3:22:73:34:27:27:07:43:83:
a5:f1:59:4b:5f:08:e2:fb:3e:79:6f:77:c6:a1:cf:9d:62:e1:
2f:e5:7a:96:6b:39:f4:0d:a0:22:17:bd:19:8a:6e:46:67:c7:
bd:6d:c2:42:c9:16:e7:46:85:c8:27:3a:7b:f6:f2:b2:d8:85:
62:8f:4f:36:43:fa:2e:2f:15:22:cb:02:52:fc:a2:2e:b1:d7:
82:97:9f:9f:6b:cd:1c:3b:0a:e3:44:f0:69:a5:0e:88:92:6c:
82:0e:07:2e:1b:45:17:80:18:c3:c5:ef:f7:5e:f0:4a:c4:60:
5a:58:bc:0b:f1:e8:b5:28:d0:59:dc:fd:34:aa:fa:59:e3:b6:
8a:c8:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:17 2025 by rpki-client