Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
File: 7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa (raw, json)
Hash identifier: HId+3Kqs+m8uB/kLMmr5EJyeYNuymSy+kVG+UVvi5gE=
Subject key identifier: D5:0A:98:55:45:DC:1B:16:0E:15:42:8B:28:B3:0F:96:DE:36:24:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 72CA42C8BD383D6933AD936AE0C8C0BED36C473D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ca:42:c8:bd:38:3d:69:33:ad:93:6a:e0:c8:c0:be:d3:6c:47:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:cb:ec:f7:92:3a:c1:9c:65:e8:32:b6:88:
2f:38:2f:2c:86:d2:f6:6b:80:e8:63:7f:f7:e5:d5:
66:85:a6:4a:33:a6:73:0f:66:6d:2e:8a:34:da:c1:
87:10:3d:ec:0f:39:c7:22:1b:ad:95:6c:e2:6e:37:
eb:63:f8:47:69:f7:4c:b3:37:a4:b4:72:34:4e:a3:
35:5f:d9:ef:b7:57:58:4d:de:f5:8b:d3:aa:af:6b:
9f:80:94:f5:ac:59:f4:d4:94:f3:78:05:a0:9b:fd:
6b:86:8e:90:a0:25:28:9e:a6:49:44:82:f4:b2:47:
39:08:ed:27:d1:32:01:39:78:59:37:7c:89:09:66:
6c:ba:e0:3b:67:bc:06:77:88:00:c6:d2:3b:55:59:
7e:c6:bc:7a:29:20:18:00:40:10:95:4d:3f:46:a7:
8c:3a:9c:86:e2:25:af:78:4d:a0:3b:d2:94:0a:f5:
18:88:f0:df:09:26:f0:18:7f:c1:43:d6:5f:f4:26:
83:19:31:60:18:e8:ec:cf:50:ec:bb:9f:9b:5e:02:
ef:db:3b:42:94:eb:57:0b:35:6f:85:2e:e3:9e:ae:
f0:81:be:06:aa:d9:c2:3a:6c:53:b3:52:d5:0c:78:
c0:3b:05:02:97:01:7c:41:1d:d4:e8:0c:77:80:d2:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:98:55:45:DC:1B:16:0E:15:42:8B:28:B3:0F:96:DE:36:24:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d48b32a-e1e4-4dab-9023-d43c684dc41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
04:65:dc:56:c3:12:02:07:91:5e:d2:6f:e5:7e:2b:f4:fe:e2:
76:0c:82:26:5f:2b:96:db:94:0a:12:1f:9f:d7:bd:95:75:17:
65:f8:df:d0:bc:ba:5f:67:4a:d8:da:ee:8c:e2:b5:48:0b:b9:
d6:23:79:38:de:d4:28:52:ae:1c:c1:9d:25:a6:61:70:1a:80:
d9:97:d5:0e:94:b9:9a:5d:d6:3e:14:35:b5:97:23:35:c3:97:
5a:b4:34:ae:4f:f0:9f:38:39:dc:7b:89:8e:e6:c5:bf:c6:a6:
b6:de:ed:2d:f3:e5:ed:31:cf:fe:76:d9:c4:c2:2b:13:b3:22:
94:8b:6f:c5:88:67:73:9c:fa:52:9f:1a:a7:bf:a6:b4:44:c6:
62:c9:d1:1c:f2:01:4b:bf:a9:5b:ed:25:e0:c5:c8:e6:ef:db:
ac:0b:76:ba:20:c7:ef:30:6c:44:88:f7:c2:49:0c:d0:fe:58:
54:91:ba:a9:cf:e4:9b:44:28:c9:26:b5:cb:0f:c8:bb:d8:1f:
99:ca:97:5a:25:dd:1d:df:23:26:f1:12:63:02:b1:42:f8:c0:
a4:c3:ce:74:ea:52:8f:c4:58:58:1f:d6:61:17:b3:ea:12:47:
92:d1:44:70:d3:7c:fb:2e:b5:31:fc:f5:b3:76:d8:1e:ed:d3:
5f:ce:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:19:26 2025 by rpki-client