Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
File: 082f654d-49b2-4849-b255-f53c382599dc.roa (raw, json)
Hash identifier: jJOesmtJgQjEWtEzSfZ2XEtWRiOUiih6/Mt4CMfTQvg=
Subject key identifier: 6C:FC:D3:AE:A1:C9:BF:7D:FA:EB:E4:B1:E7:32:52:AF:CC:F5:62:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49E3A706FB7D3AD96F413C259401133FAEAFABED
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e3:a7:06:fb:7d:3a:d9:6f:41:3c:25:94:01:13:3f:ae:af:ab:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=b14e5efa5194aee1dc24be28e60a5fa62033686836780ecb1c03e810fcd80a04, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:c1:c5:05:7f:31:ca:0c:71:68:f2:2b:49:
9e:b5:cb:44:ac:17:d9:d8:93:4e:26:2f:63:28:e7:
ad:22:fd:cb:cc:1b:3c:51:ee:f1:ae:f1:63:e5:bb:
f5:f2:12:36:67:ed:67:0e:55:cb:cc:dc:01:91:6e:
75:31:2e:95:e0:c1:70:1d:b0:c1:59:6f:e4:e0:95:
91:41:5a:51:d4:69:6a:93:f0:a4:27:61:d1:50:5b:
83:0d:ee:31:c7:ed:53:31:e4:83:71:16:5e:14:75:
17:08:3e:60:b5:e0:44:8f:57:1c:d5:63:2d:49:af:
0f:df:f4:c7:22:bd:0b:d0:df:91:b3:df:03:45:0c:
06:23:d6:d7:08:4c:08:8f:c4:06:cd:b3:28:4e:4a:
34:84:00:6f:b0:fa:b8:32:c3:3e:1e:74:8c:83:09:
1b:e3:c5:89:92:14:5f:71:e3:ed:ea:53:14:48:2b:
f2:c2:34:bb:0a:2c:db:f8:2e:8a:60:1d:00:49:9c:
4a:33:ea:eb:84:a8:e0:b4:54:20:30:28:fe:87:af:
09:e2:3d:d1:49:98:8d:b5:bd:e6:d0:50:72:12:1e:
f2:03:c6:4a:dc:b1:d2:38:42:ba:43:d0:f6:98:f2:
df:aa:ea:9c:ed:2b:d6:8e:70:f3:fd:7e:59:ae:03:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FC:D3:AE:A1:C9:BF:7D:FA:EB:E4:B1:E7:32:52:AF:CC:F5:62:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/082f654d-49b2-4849-b255-f53c382599dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:c6:73:96:d1:4e:cf:61:e7:df:a6:9b:ab:ef:10:f2:89:46:
eb:9d:b8:f6:ef:40:83:10:7e:ab:67:02:6c:de:95:90:5f:9d:
04:e5:7b:3b:8f:f0:60:94:dd:2e:fc:ed:34:58:21:93:b3:64:
6c:16:99:6a:87:23:ed:99:53:95:2b:7e:c4:ae:6c:da:d8:f4:
11:c9:04:b8:00:90:26:8b:c0:e9:37:c9:80:a8:98:f0:df:e5:
36:ab:08:8b:e3:ac:30:5a:f2:dd:e3:99:09:9e:5c:2b:f8:01:
7b:95:7d:5d:1e:03:87:9e:8d:6f:46:7c:15:0e:bb:6a:3c:46:
8e:69:8c:33:ea:5f:4a:fc:39:95:10:0e:c7:d6:ca:10:63:28:
bc:cb:68:f6:64:85:91:1a:7e:34:cc:e0:9e:4c:d4:9b:0b:9d:
3f:a1:99:9e:b9:7c:4f:69:7c:b0:d8:c2:8c:4c:60:b5:1a:b5:
ed:b2:8a:1c:db:86:9e:14:eb:0d:07:3d:55:77:60:9a:60:54:
f3:2b:9e:74:9d:62:1a:8e:e8:39:2b:d1:a3:95:df:25:54:40:
16:f6:66:5f:b3:dc:36:c6:3d:07:f6:45:fb:81:76:74:ec:8b:
c8:2d:06:19:fe:bd:cb:54:f4:32:d8:f1:b6:8d:d4:04:5d:62:
23:1f:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net