Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
File: 0044471b-07bc-4caf-8218-11c01ca18965.roa (raw, json)
Hash identifier: x2VdkzX0QAW6S7xSmRKWtOV6uWkkQCSdQDCanXU/TJw=
Subject key identifier: B3:9A:9E:17:08:8E:DB:1E:57:2E:BF:BE:CE:A1:85:D1:5D:00:D7:01
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 05E60DB3582DDABF3A7F13A4DA6920CC4B0CCE93
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e6:0d:b3:58:2d:da:bf:3a:7f:13:a4:da:69:20:cc:4b:0c:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=1d3f84b9225b6cf29ac6740aa1c2b1d288bb3f93ace0ab7efdcd390883ec116f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:7c:b9:94:3d:c8:9d:3c:86:3d:28:df:f6:
94:76:77:60:4b:b7:a5:02:3d:3f:cb:64:92:d1:af:
1f:ab:d7:34:b6:3a:e4:f1:c2:66:fc:94:ff:0c:f8:
f2:b8:c4:9e:83:bb:04:b2:47:4a:ae:eb:9b:ab:c2:
c2:48:b8:28:c2:50:23:fe:87:13:05:cd:70:40:cf:
41:d5:f1:4f:da:4a:ec:69:aa:84:d3:17:d8:94:02:
65:89:bb:c0:fb:a6:d4:fe:58:07:c2:9c:96:34:6f:
f4:62:64:bb:a1:af:65:f5:12:c1:d1:ae:e4:cf:ec:
e3:cd:e2:84:53:05:b2:89:60:e3:3b:33:34:34:61:
80:2d:1d:52:48:f0:20:9b:fb:c8:5d:c3:91:84:ad:
aa:89:5a:ee:14:23:6d:e5:8f:b9:f2:91:22:15:3b:
0e:71:6d:c4:8e:47:17:de:63:7d:a5:60:d3:21:7f:
99:09:47:3b:01:00:0b:31:a9:20:94:4f:a7:33:e5:
39:0a:8e:47:11:f3:27:ae:28:67:ee:7d:41:77:99:
58:d1:5b:21:48:e2:8e:b2:06:d8:8d:6e:18:3a:c7:
5c:85:62:4a:6e:d9:73:82:2c:4a:aa:64:10:1d:0a:
23:9a:ad:60:6a:88:d9:5a:a8:6f:cc:46:f6:d3:ac:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:9E:17:08:8E:DB:1E:57:2E:BF:BE:CE:A1:85:D1:5D:00:D7:01
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:02:45:72:98:ec:de:c0:00:d9:d3:e0:13:5c:86:02:2d:1d:
36:a3:88:56:07:0e:69:4b:bb:18:a0:e9:45:e8:9e:e0:e0:70:
4d:9e:a0:2a:5b:55:9b:9b:25:ef:ff:e5:a7:44:48:8d:dd:f5:
5b:8a:49:58:e5:e5:81:a2:5b:f8:7f:28:62:52:c3:bc:30:4a:
14:38:e0:1d:02:05:6b:85:2b:27:8b:2e:74:70:22:bf:6c:a4:
6d:d2:59:03:cd:69:b1:d1:52:c2:14:cd:27:00:86:2d:6c:09:
88:eb:8b:9d:f2:c4:1b:68:10:43:ae:97:3c:b3:a6:f5:25:e3:
ab:24:03:20:ab:af:89:5a:a5:03:97:63:10:39:ae:92:3a:30:
ae:ff:45:28:c7:92:21:f5:49:f6:b3:b1:91:d6:22:89:44:fa:
e6:f4:92:ce:7a:15:a9:13:2d:dc:8f:08:e4:3f:40:93:d8:2e:
b4:16:e3:10:e3:05:57:c4:b5:7c:72:e3:d5:23:63:2e:42:68:
63:77:c1:77:c6:09:7e:13:52:cc:1a:50:eb:c4:dd:83:12:a3:
08:fd:7d:3d:f0:3a:0b:61:3f:aa:db:dd:5a:ba:fc:1f:de:10:
6e:e7:af:bb:53:69:77:74:4c:0c:7e:13:72:07:68:79:fd:c9:
f8:b1:9f:35
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUBeYNs1gt2r86fxOk2mkgzEsMzpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkM2Y4NGI5MjI1YjZjZjI5YWM2NzQwYWExYzJiMWQyODhiYjNmOTNhY2Uw
YWI3ZWZkY2QzOTA4ODNlYzExNmYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKg8fLmUPcidPIY9KN/2lHZ3YEu3pQI9P8tkktGvH6vXNLY65PHCZvyU/wz4
8rjEnoO7BLJHSq7rm6vCwki4KMJQI/6HEwXNcEDPQdXxT9pK7GmqhNMX2JQCZYm7
wPum1P5YB8KcljRv9GJku6GvZfUSwdGu5M/s483ihFMFsolg4zszNDRhgC0dUkjw
IJv7yF3DkYStqola7hQjbeWPufKRIhU7DnFtxI5HF95jfaVg0yF/mQlHOwEACzGp
IJRPpzPlOQqORxHzJ64oZ+59QXeZWNFbIUjijrIG2I1uGDrHXIViSm7Zc4IsSqpk
EB0KI5qtYGqI2Vqob8xG9tOs6+kCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSzmp4X
CI7bHlcuv77OoYXRXQDXATAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MDA0NDQ3MWItMDdiYy00Y2FmLTgyMTgtMTFjMDFjYTE4OTY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFWXMA0G
CSqGSIb3DQEBCwUAA4IBAQAdAkVymOzewADZ0+ATXIYCLR02o4hWBw5pS7sYoOlF
6J7g4HBNnqAqW1WbmyXv/+WnREiN3fVbiklY5eWBolv4fyhiUsO8MEoUOOAdAgVr
hSsniy50cCK/bKRt0lkDzWmx0VLCFM0nAIYtbAmI64ud8sQbaBBDrpc8s6b1JeOr
JAMgq6+JWqUDl2MQOa6SOjCu/0Uox5Ih9Un2s7GR1iKJRPrm9JLOehWpEy3cjwjk
P0CT2C60FuMQ4wVXxLV8cuPVI2MuQmhjd8F3xgl+E1LMGlDrxN2DEqMI/X098DoL
YT+q291auvwf3hBu56+7U2l3dEwMfhNyB2h5/cn4sZ81
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net