Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/018d1278-2c0d-467a-ae97-a69101b9f274.roa
File: 018d1278-2c0d-467a-ae97-a69101b9f274.roa (raw, json)
Hash identifier: QcrGzGJ1Zeke713U+KTpB3dXNJMiZwrL9CYLV95ToB0=
Subject key identifier: AD:BC:2B:6D:03:0A:D5:9D:49:2B:66:72:AE:FA:0A:0E:5C:CC:25:32
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1516A298C259D86070E738AA1221472A4EBE1559
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/018d1278-2c0d-467a-ae97-a69101b9f274.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:16:a2:98:c2:59:d8:60:70:e7:38:aa:12:21:47:2a:4e:be:15:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=bea2cab5265ba4761e50824831a0588e6df30c2bc7e4b235606e551182f626b3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:57:c8:44:7d:75:25:3c:7d:24:23:63:0d:
d0:3c:91:6c:59:af:55:a2:b7:6c:77:fb:d2:d3:ef:
52:5a:dc:71:6a:75:b4:7c:7c:e0:30:d5:cc:53:f2:
45:83:3e:5a:47:9f:4f:69:c0:06:ee:86:91:17:5d:
39:93:ff:76:2a:64:20:00:08:3c:b6:e6:17:f6:bf:
1e:66:0d:44:42:65:52:75:6c:61:c7:b8:27:41:15:
15:55:ca:ed:e1:9c:f3:3f:eb:bb:0b:f5:df:e0:e7:
ef:1b:33:3c:01:5b:3a:4d:77:c9:37:e4:4f:4f:1d:
2e:ea:c5:62:12:69:3e:cd:66:3d:03:ed:f3:fc:8c:
98:f7:24:cd:f1:15:8e:81:be:de:be:3c:9d:f4:16:
28:1c:2d:8a:b3:84:4e:3f:ab:e3:86:ee:ab:43:38:
73:db:79:1a:c9:02:23:a6:dc:af:ba:16:d7:91:b1:
c6:c5:1a:bb:53:58:2c:7b:d0:26:49:b3:b1:45:25:
48:42:48:60:45:af:6a:0b:fb:01:52:0c:10:36:dc:
2a:44:18:1b:4a:3b:1a:0c:57:67:5a:14:fa:21:40:
f0:2e:d5:ea:c1:69:1e:ca:85:b0:3a:fc:a5:94:8f:
26:68:e5:d0:ec:3d:de:56:71:e7:0b:8c:4e:e5:74:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:2B:6D:03:0A:D5:9D:49:2B:66:72:AE:FA:0A:0E:5C:CC:25:32
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/018d1278-2c0d-467a-ae97-a69101b9f274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:37:e7:10:6d:5a:78:9a:e5:e9:54:b3:5d:b5:5a:95:46:5a:
46:73:64:f5:e7:ce:2a:f6:45:27:f8:f4:34:1e:2b:ad:5d:02:
a9:80:c0:49:bf:a8:48:ee:db:8d:5c:46:ba:f8:d0:1e:49:56:
03:40:36:61:7a:85:3b:eb:97:a4:07:94:b2:8f:c1:5b:3c:34:
53:d9:03:01:0d:8a:31:d8:71:1f:01:30:bc:5f:43:4a:6f:2d:
73:e1:b9:40:3e:de:88:ea:99:78:db:4f:db:de:c0:9e:76:bb:
2f:2d:1d:36:d9:f2:3a:ee:9b:10:1a:28:61:4a:c6:c5:7a:ba:
e3:66:f5:93:80:63:cd:1d:7d:60:65:0d:63:91:5e:eb:af:82:
ca:03:09:1b:a4:c2:91:1d:3c:80:99:77:2d:42:c3:7d:9c:39:
61:dd:ba:ac:de:a6:62:d4:02:66:c1:b0:31:73:83:89:79:19:
0a:28:28:a2:90:dc:84:cb:8c:f3:46:9d:79:2c:a6:ff:17:fa:
8e:90:07:99:1e:41:66:36:eb:72:28:fd:d4:7f:a0:58:78:30:
e0:1d:7e:58:48:2d:27:f2:a5:cf:40:9f:1b:7d:0a:bc:e2:48:
66:95:66:f4:08:d9:7c:8e:b2:22:1e:ef:a6:c3:cc:a0:b4:fc:
2f:67:3a:2e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUFRaimMJZ2GBw5ziqEiFHKk6+FVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGJlYTJjYWI1MjY1YmE0NzYxZTUwODI0ODMxYTA1ODhlNmRmMzBjMmJjN2U0
YjIzNTYwNmU1NTExODJmNjI2YjMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO0MV8hEfXUlPH0kI2MN0DyRbFmvVaK3bHf70tPvUlrccWp1tHx84DDVzFPy
RYM+WkefT2nABu6GkRddOZP/dipkIAAIPLbmF/a/HmYNREJlUnVsYce4J0EVFVXK
7eGc8z/ruwv13+Dn7xszPAFbOk13yTfkT08dLurFYhJpPs1mPQPt8/yMmPckzfEV
joG+3r48nfQWKBwtirOETj+r44buq0M4c9t5GskCI6bcr7oW15GxxsUau1NYLHvQ
JkmzsUUlSEJIYEWvagv7AVIMEDbcKkQYG0o7GgxXZ1oU+iFA8C7V6sFpHsqFsDr8
pZSPJmjl0Ow93lZx5wuMTuV0jUsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBStvCtt
AwrVnUkrZnKu+goOXMwlMjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MDE4ZDEyNzgtMmMwZC00NjdhLWFlOTctYTY5MTAxYjlmMjc0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADM8MA0G
CSqGSIb3DQEBCwUAA4IBAQAbN+cQbVp4muXpVLNdtVqVRlpGc2T1584q9kUn+PQ0
HiutXQKpgMBJv6hI7tuNXEa6+NAeSVYDQDZheoU765ekB5Syj8FbPDRT2QMBDYox
2HEfATC8X0NKby1z4blAPt6I6pl420/b3sCedrsvLR022fI67psQGihhSsbFerrj
ZvWTgGPNHX1gZQ1jkV7rr4LKAwkbpMKRHTyAmXctQsN9nDlh3bqs3qZi1AJmwbAx
c4OJeRkKKCiikNyEy4zzRp15LKb/F/qOkAeZHkFmNutyKP3Uf6BYeDDgHX5YSC0n
8qXPQJ8bfQq84khmlWb0CNl8jrIiHu+mw8ygtPwvZzou
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net