Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
File: adc1220c-3515-4928-b808-ab48f97a186c.roa (raw, json)
Hash identifier: sVmNYSAd3rU9h13F9Xt3pd0S+0PlVghPAjbtLS1DuV0=
Subject key identifier: DC:15:68:B1:AC:86:A4:83:A0:7F:30:FA:14:A4:2E:29:85:3D:54:13
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3722A089DA073B65D6CFB6632066E73A331C49F5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:22:a0:89:da:07:3b:65:d6:cf:b6:63:20:66:e7:3a:33:1c:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:8a:55:06:71:4e:6f:22:be:95:65:26:36:
2b:6a:cd:85:d5:ac:a9:0e:f2:16:20:12:c8:e9:9e:
14:24:41:a3:dd:2d:3f:10:dd:21:99:79:ec:69:3d:
36:41:b3:81:52:b1:bc:3a:2a:4d:dc:af:f1:4d:14:
fa:9c:d1:74:3c:96:0e:ea:ac:0d:55:f1:ce:6d:3b:
82:31:49:0a:87:31:74:5a:13:02:47:73:ff:52:ca:
54:c0:ea:f0:1d:35:58:13:82:bc:94:7c:fd:1f:72:
99:a7:b2:f7:c1:fa:b8:a8:44:77:ee:cb:13:e7:bd:
b8:57:cf:84:34:84:51:60:e9:4e:34:c1:29:0c:2d:
2a:d4:be:62:c6:ee:52:63:60:19:7a:ae:30:64:73:
e9:bf:6a:1e:db:e6:4e:00:63:9e:df:76:c1:bf:c6:
92:8d:56:df:b4:f1:ba:94:d4:bc:df:66:cc:f0:64:
2d:83:42:fa:57:14:c6:15:7e:01:ec:7a:86:54:df:
b2:4b:82:09:b0:0c:a2:8f:21:d6:c3:1c:2e:af:ef:
d8:15:ca:9b:7c:57:45:a7:72:d7:db:c7:e7:2a:6c:
1e:83:03:c9:21:7a:57:7f:aa:83:3e:62:fd:d4:f6:
73:07:93:12:2f:0f:00:a6:99:d3:ef:53:dc:4b:ea:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:15:68:B1:AC:86:A4:83:A0:7F:30:FA:14:A4:2E:29:85:3D:54:13
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:25:0f:0b:56:96:a3:73:74:63:52:3c:16:85:09:2d:1c:0e:
4c:7f:5e:96:01:de:4d:33:14:ab:37:c9:bb:88:d5:de:30:b2:
43:61:20:73:5e:84:85:56:3a:55:fb:81:6a:9a:24:8b:1f:71:
30:65:11:55:08:90:3b:4e:b7:4c:94:b4:11:06:dc:0f:16:cf:
d7:66:53:e5:36:7f:56:6b:25:f6:f3:0b:7d:14:8e:e7:25:c8:
6c:63:3e:78:b5:25:d2:32:c7:13:51:2a:9c:28:50:cf:d1:29:
59:76:7d:a7:47:05:2e:fd:18:b2:32:cd:9e:6f:c7:97:a2:67:
50:83:4e:4c:58:8c:bb:c2:71:43:9b:c2:a4:e8:9d:e9:da:ff:
11:37:9d:59:3e:74:e0:33:28:94:c3:36:ec:35:18:d4:40:78:
ba:c9:8c:04:2d:37:f3:5f:5a:46:ac:fa:4d:af:80:83:27:4b:
c1:dc:16:6f:3c:6e:56:65:a6:a6:6b:5b:22:2e:63:76:c1:f6:
45:08:6a:01:9e:11:03:c3:d7:0a:75:cf:86:73:be:d7:db:34:
67:de:f4:28:98:cd:df:55:2a:12:1f:84:a6:51:28:b0:5a:4a:
10:ee:df:c4:05:9f:81:32:6f:db:01:91:83:77:60:62:43:0d:
ef:e9:83:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:36:22 2025 by rpki-client