Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
File: 031fea15-c13d-4e0e-babb-6e454a72d1c1.roa (raw, json)
Hash identifier: 9XWqVfIRuWH19sxHlEtbI2oA6H2XAM0AiEp8rN8RxGU=
Subject key identifier: 81:6C:BC:42:EC:45:94:12:59:FD:1D:E9:51:29:5B:2C:2F:B2:4E:7A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 16ADADD1BC68310C2F48F6707EDE574BD11BB388
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ad:ad:d1:bc:68:31:0c:2f:48:f6:70:7e:de:57:4b:d1:1b:b3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=974f26bbf286856da46912d271c31ba4b1e72bc6deb841e6d66d3e71f4943430, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:2f:aa:f7:5e:3c:cd:03:e3:db:f3:d9:1a:
36:34:7b:13:f3:41:61:c9:45:49:dc:62:84:c9:57:
33:62:5d:26:7c:4e:9d:29:87:72:81:ea:5a:a1:c2:
19:11:74:81:d6:aa:71:32:dd:dd:e1:43:38:ca:0e:
27:c8:61:90:95:8d:f3:d4:ca:15:40:ae:94:2e:6e:
90:7d:d6:da:43:4a:c5:07:f3:fb:67:f8:4e:ae:30:
fd:59:d0:12:85:b5:7b:2c:3e:18:e4:7c:a0:2b:39:
40:d3:7d:a5:b7:62:71:79:c6:b4:0e:07:12:a8:a0:
92:68:e5:a4:67:f8:7c:7e:de:d3:b5:d8:a8:69:cf:
a4:8f:34:35:d6:bb:66:49:33:a8:4e:e2:02:83:44:
f3:30:c3:c1:a2:f3:73:46:99:96:70:c0:7d:ea:d0:
f7:70:7c:34:ec:5b:2c:1d:e7:79:12:2a:b3:ed:59:
84:f5:20:65:69:4b:78:36:97:54:c6:f3:02:07:69:
e9:ba:27:a5:04:ec:5c:79:fb:4b:32:0a:f5:51:46:
8b:b4:51:7c:45:d8:0e:66:0d:2b:bd:cc:b8:3f:31:
76:7d:c7:53:cd:5a:82:0c:2a:81:72:0e:e2:f4:b6:
f6:39:47:84:6c:ee:cb:f6:07:e6:71:35:01:f3:71:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:BC:42:EC:45:94:12:59:FD:1D:E9:51:29:5B:2C:2F:B2:4E:7A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:bb:64:74:f9:cc:39:b1:88:e4:2d:da:4e:89:de:f5:82:55:
94:8a:52:94:51:ab:fe:2a:7d:30:24:e2:78:25:7d:e7:4b:b7:
97:85:36:62:8b:39:87:9d:6a:11:44:64:71:cf:ac:5d:1b:78:
02:8e:e1:a5:97:df:8d:8a:db:34:c8:93:0a:fb:11:75:05:66:
e6:7f:19:d6:43:42:ed:84:f3:1f:f1:6b:4d:11:7b:54:f2:d1:
d5:7e:ff:95:3a:40:3b:f2:4d:76:63:54:da:4c:ea:24:c2:61:
6e:b2:7c:b2:9c:a1:e1:ff:5f:11:12:e6:be:cb:73:14:78:94:
97:05:26:94:80:07:57:f2:85:5f:54:8e:54:1a:6a:a6:1b:2d:
aa:43:8d:fb:ee:2b:a3:2d:b2:2e:ba:bb:75:04:e5:2f:05:9b:
cc:bd:03:a9:ce:fc:5c:50:54:76:b4:da:bc:55:e3:8e:54:d5:
e5:cb:6d:ae:2c:41:00:93:bb:7c:fb:11:b3:df:ff:0d:3e:45:
c4:c0:a1:a2:cf:1c:8d:75:b0:c9:b0:e9:e5:26:8a:88:d0:95:
90:b8:2a:3a:39:9a:42:a0:d3:e8:0d:71:ab:f6:af:a2:66:9e:
80:cd:69:bc:e0:8e:1a:0b:6b:73:b2:a2:d2:52:78:42:28:b8:
60:56:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net