Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/06017a46-176c-427e-bd78-48276cbb30ef.roa
File: 06017a46-176c-427e-bd78-48276cbb30ef.roa (raw, json)
Hash identifier: eN7Qmr7WxJD2aEjP2opPJr/q56/oPHdpOTFFCPwfp7o=
Subject key identifier: 8F:03:DE:E5:DE:D2:7C:72:1B:20:B3:F7:4F:AD:19:4B:3B:74:89:63
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5E6D7BA756776F2BADF75ED1D0521B30B0D03655
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/06017a46-176c-427e-bd78-48276cbb30ef.roa
Signing time: Mon 02 Sep 2024 00:00:00 +0000
ROA not before: Mon 02 Sep 2024 00:00:00 +0000
ROA not after: Mon 07 Oct 2024 23:59:59 +0000
asID: 8987
IP address blocks: 51.224.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6d:7b:a7:56:77:6f:2b:ad:f7:5e:d1:d0:52:1b:30:b0:d0:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 2 00:00:00 2024 GMT
Not After : Oct 7 23:59:59 2024 GMT
Subject: serialNumber=3282eb01e5855d5142f78a984554e5353b385ece50642054273708cce3efbf6a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:8f:2e:2e:e5:4b:55:70:8b:c1:f6:7b:31:
51:70:28:d6:9c:56:bf:e7:95:3c:6a:c3:7f:37:d6:
6e:40:da:57:c1:e9:19:ed:41:5b:45:4b:9e:5c:6a:
36:70:7c:dd:fe:8d:2f:8f:4f:00:cc:3b:e1:56:94:
08:be:af:f6:67:9a:3b:82:8a:6c:b7:1c:a2:ab:54:
f8:1f:47:66:bd:ef:b7:a4:4c:08:2e:c3:09:38:b3:
1e:f3:67:7f:49:f2:02:a6:44:ce:f8:71:75:17:4e:
bd:8e:fc:7f:52:72:8c:8f:c8:29:f3:f9:e0:a0:fb:
07:e7:ce:01:71:3e:88:9a:0e:d5:17:88:78:37:d2:
2a:ee:36:d8:73:eb:54:9d:04:9a:74:26:b7:7b:9b:
ef:88:ab:59:76:0a:15:b3:30:39:c0:d0:1c:c1:c0:
4f:38:2f:9a:c4:31:0a:5e:c0:a9:cb:ef:2d:96:de:
d8:3e:be:f2:45:08:7c:dd:06:bb:5a:a7:e4:cb:d8:
69:46:78:ef:be:47:dc:02:d4:67:7d:26:d2:7f:03:
8d:84:7f:5c:31:f4:39:f6:9f:87:1e:a3:fe:2b:62:
bc:2e:c4:80:e7:28:cc:41:8f:f4:51:bb:33:5b:22:
32:c5:12:b5:71:15:b1:28:73:2b:75:75:9c:62:bd:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:03:DE:E5:DE:D2:7C:72:1B:20:B3:F7:4F:AD:19:4B:3B:74:89:63
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/06017a46-176c-427e-bd78-48276cbb30ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4e:0d:57:ed:90:e4:e1:a8:0a:4a:bb:4b:a2:2d:7b:a8:0e:e5:
73:cc:25:12:6d:7f:05:59:97:0d:81:5a:f2:14:ea:bb:a4:b0:
e4:d6:35:23:0a:04:4b:9b:0c:3f:a1:46:9b:52:69:ed:24:ba:
54:8e:7e:34:b6:56:3d:d1:99:35:78:80:6e:e0:ca:52:29:87:
51:a3:c0:55:d0:35:ef:90:f8:1c:da:d0:f7:e3:f7:31:2c:39:
de:67:40:05:0d:b1:ba:83:e8:81:9a:df:a9:9c:33:5c:f0:23:
ab:28:d3:30:62:ec:64:c9:6e:01:48:14:23:2c:24:54:4c:d4:
ac:64:c1:1e:63:fd:73:8f:68:e6:20:6c:ce:21:1b:16:25:4c:
22:96:48:28:b4:8e:41:1c:ef:9b:ab:1f:6a:c8:50:13:9d:aa:
4b:f7:1c:d4:b8:1b:ff:6c:c2:4f:41:15:e6:96:77:74:ba:7c:
ce:44:3e:f4:47:7b:fd:28:bb:3c:a7:4d:68:94:d5:48:c2:d5:
14:39:6e:7e:b2:c1:d4:88:5d:66:58:87:a6:0e:a3:85:60:5e:
4c:74:ac:ba:93:5c:58:01:47:25:43:ff:5d:b8:c2:b2:7c:0e:
23:62:cb:72:c9:42:91:f8:bb:a7:96:cb:46:40:7d:d3:24:bd:
8a:de:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:06:50 2024 by rpki-client on console.sobornost.net