Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
File: ecd45447-b567-4c62-b588-28bb50cce889.roa (raw, json)
Hash identifier: Ma7J1FhFDwQeeRvzoeph0Efb5yVvmWsigNKQ/ORvVIs=
Subject key identifier: CC:4D:A0:67:59:7C:58:28:FB:87:E4:01:48:44:AD:3F:A0:01:52:5D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4822B7F239098992E4994450CCDF433A7CE496CE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
Signing time: Wed 05 Mar 2025 17:51:27 +0000
ROA not before: Wed 05 Mar 2025 17:51:27 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:22:b7:f2:39:09:89:92:e4:99:44:50:cc:df:43:3a:7c:e4:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:27 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:88:c1:71:e7:a7:21:d7:50:20:80:c2:4f:
e6:2e:45:e7:bd:83:bc:ee:72:5c:40:47:85:f5:54:
ee:47:8b:fb:36:20:27:ab:55:b8:96:73:27:74:fd:
5d:c4:0b:cd:ea:be:24:21:a1:d6:c6:c7:59:eb:34:
88:33:c5:ff:f8:c5:41:35:a0:12:6a:83:87:a6:70:
fd:ba:5e:9e:2e:66:6a:2e:d2:13:eb:e8:84:31:67:
0c:a7:8f:96:6c:30:7d:92:c3:7c:50:10:2a:e3:56:
d1:9b:01:d1:8a:c2:3f:43:ea:0e:4f:30:b6:79:58:
43:0e:69:9b:6e:3b:de:48:7e:ea:d6:b8:ff:20:c1:
cd:d2:39:24:6b:68:70:0b:0f:ae:00:2b:87:7c:73:
ce:62:6c:4f:66:05:73:92:b1:1c:cc:c3:0b:b8:7a:
54:bc:6a:8a:0b:ff:60:2a:4d:78:31:30:7f:c9:06:
7a:a3:80:6e:8d:78:d4:34:d7:5c:37:11:03:38:c1:
b6:a8:8e:1a:64:32:f6:65:da:fd:ee:59:42:fb:33:
62:47:40:53:4c:64:e8:2e:69:61:1b:ed:92:37:a6:
fa:69:fd:7e:3c:b0:a5:ee:89:39:fa:0f:5b:35:0f:
80:7a:d9:e0:d0:14:d1:07:32:ac:45:dd:22:fa:2f:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:A0:67:59:7C:58:28:FB:87:E4:01:48:44:AD:3F:A0:01:52:5D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:67:72:30:a2:2f:b8:c1:9a:de:58:97:c9:c6:b4:bb:b2:8d:
80:c6:2f:10:a3:ff:e7:19:98:2f:89:78:08:d9:a5:c4:ad:a3:
01:49:5d:a2:bc:a2:d9:8d:8d:6d:fd:46:ab:c9:3f:b0:76:82:
ad:de:9a:9f:e0:79:7c:91:5a:90:61:15:41:95:bf:f5:2f:54:
06:85:e7:ba:93:d9:df:22:4c:e8:e9:29:8e:f0:07:2f:26:1e:
60:cd:5c:f1:9e:6a:bd:02:6f:01:28:72:4d:67:f7:8a:58:2d:
9c:41:b7:42:0a:e3:0b:68:9f:e3:ab:4b:49:30:8f:9e:4f:41:
f2:61:8d:f9:8c:56:75:7f:c8:5e:0e:68:3d:89:49:1e:18:2f:
72:fa:2b:f7:5a:13:ac:0e:b6:04:6d:79:38:54:63:85:76:08:
49:48:a8:7a:fb:da:f7:8f:ae:e9:64:8a:d1:b3:f1:4b:6c:de:
77:b6:62:2b:a0:ab:3a:2e:c0:e0:99:7f:f4:c9:39:82:ba:c5:
5c:e3:f1:a7:6c:6c:48:a9:7e:e7:b7:26:6e:04:c1:7b:96:66:
c4:2d:ad:ce:27:7f:8b:59:84:16:1b:64:1a:43:c3:d5:fc:fb:
72:8a:2d:ce:af:c4:71:a9:15:31:2f:26:52:46:aa:dc:25:36:
6a:ed:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:43 2025 by rpki-client