Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
File: c0405df2-d412-488a-b5ee-d265912dd3cc.roa (raw, json)
Hash identifier: jGTx/id9ogx1VZ+1P5kFGS1ATT0huTnOm1d2+yqB55w=
Subject key identifier: FA:D6:C5:A5:C5:F7:C9:25:F8:98:F7:56:6F:29:E6:12:05:97:65:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0729EBA6916009F206035CA7DEC555AE1C163E37
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 83.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:29:eb:a6:91:60:09:f2:06:03:5c:a7:de:c5:55:ae:1c:16:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:02:c5:cc:30:7e:38:c6:6b:f5:ca:c6:28:
86:1f:ff:9f:37:ce:ba:7e:11:64:a5:7b:92:68:68:
83:4e:01:2b:01:44:10:48:0e:9e:76:ea:9a:8b:19:
0c:1c:02:f0:00:08:e9:88:75:8a:86:17:78:db:f9:
57:38:ff:09:25:89:10:7d:42:e1:21:f0:23:82:58:
a8:25:bd:bf:0d:4f:6e:4d:cc:dc:aa:f1:b3:89:52:
1a:ec:5a:55:46:50:3d:d5:0b:e0:60:83:a3:52:70:
c7:93:75:b5:08:ea:a1:5d:6c:a9:57:47:8b:1b:9a:
a0:65:95:4f:87:0a:fb:ae:ea:3e:fd:ad:52:45:01:
ea:77:ff:c4:7f:91:12:83:74:e5:48:f1:2d:b7:dc:
c6:c5:6a:29:ed:e0:6e:48:35:c3:68:f7:55:af:67:
c7:31:c3:54:d6:f7:19:7d:cf:6b:2b:d7:81:02:7c:
2c:07:fa:fb:25:02:bf:12:07:03:56:53:dd:e6:e5:
3d:92:14:38:29:e2:33:f4:43:72:75:8c:be:53:c2:
3a:f8:64:4d:93:f5:ac:f5:8d:98:f7:2c:cf:87:bd:
34:12:28:f9:d4:a5:c0:67:6a:91:9c:64:d6:8c:26:
25:d6:bf:2d:26:f6:45:3a:da:f2:d9:54:dd:cd:96:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:C5:A5:C5:F7:C9:25:F8:98:F7:56:6F:29:E6:12:05:97:65:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:a6:8a:fd:84:04:47:4a:ed:88:f9:1a:08:99:59:40:5d:e9:
10:51:1b:5e:69:73:13:d8:5b:9c:94:e0:bc:dd:3d:d1:26:4a:
e6:5e:0a:e3:9f:1a:ef:80:f2:b4:4c:5b:08:ce:75:e6:e0:45:
0e:66:3b:4d:c3:a3:d5:6d:e3:ef:9e:3f:4a:30:28:42:8b:0f:
a5:4d:7e:b5:85:09:e1:33:ab:f6:37:b4:c6:bf:51:10:b8:7e:
27:9d:21:5f:52:93:23:2f:0b:49:9e:77:57:c2:d7:11:56:37:
f2:1a:b7:d9:7a:1a:06:2a:1a:35:8b:32:3c:eb:c7:cc:46:4d:
16:f8:49:f8:43:3a:87:d1:a8:b4:3f:71:07:c8:3a:c7:9b:3f:
d9:5e:b1:ba:5d:da:0d:cf:cd:a9:47:22:db:9f:38:a9:0a:af:
ab:4e:27:f6:fd:5d:11:d4:f3:34:0c:fa:a0:cc:1f:be:86:e9:
94:d1:f2:77:96:0b:3a:ba:85:27:8f:bf:e3:76:4e:7b:8b:56:
6e:11:82:c3:cd:fd:84:95:cd:8f:11:35:dc:d5:4a:f5:bd:e4:
fd:20:49:9f:55:cf:d8:ba:8e:cc:82:39:36:32:c0:a9:a5:1a:
e5:d0:87:f5:e4:3e:d3:06:7c:c0:6f:42:1b:5e:74:97:c7:cc:
28:c5:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:38 2025 by rpki-client