Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa
File: 0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa (raw, json)
Hash identifier: D12xCnA/Xj6Q7Yaa2Xg8K68Dxjp1xvWqi3JqJypg0zA=
Subject key identifier: D1:C5:F3:EB:C2:CB:63:66:A3:CA:20:37:11:EA:25:4D:15:01:AC:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 65E7056F27AED4776706F06979AAD3A0B2A8FA54
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e7:05:6f:27:ae:d4:77:67:06:f0:69:79:aa:d3:a0:b2:a8:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=ca4366e7485e48a5da9ab08a9d9fe82b0d747ce8d6b15219d92a127907062dcf, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:a3:c9:e3:1c:d5:32:e5:70:b2:1a:d3:7b:
0d:ab:0d:df:20:e6:72:dc:eb:62:ff:d1:51:5b:32:
4b:61:41:d4:77:16:05:48:db:16:03:7f:81:43:68:
b3:f1:2c:52:e1:1b:cb:15:b3:cb:58:82:f4:a9:ed:
eb:ef:0a:da:56:14:91:fe:72:ec:6b:35:60:d5:f2:
77:fc:a6:ad:15:a5:e6:c3:98:15:24:92:8e:9a:09:
67:16:30:74:89:90:3f:a5:d3:23:e2:62:63:97:74:
00:cf:e5:92:21:91:1a:13:88:cf:20:4d:af:c4:81:
9f:e4:2f:0b:48:30:c9:97:7a:23:26:ee:bb:8b:6e:
d6:48:c4:82:a0:d7:eb:43:17:58:99:00:c8:6f:47:
8d:0c:1b:b6:16:40:73:3b:8d:c1:6d:c4:70:7d:c8:
d3:a8:19:61:6a:90:80:c5:ad:01:86:d1:d6:0f:8f:
45:fd:c0:e3:c2:58:12:58:f7:dd:2a:42:59:6a:93:
43:a9:a3:c9:7d:b4:26:14:88:fb:6e:36:4e:72:6b:
2f:1c:91:01:1d:72:7f:b9:e4:84:f3:6f:1a:0b:0b:
c1:e6:25:51:64:23:83:61:86:4f:36:43:66:eb:eb:
cf:e3:72:47:5d:94:2d:42:8d:f5:10:bd:1f:c8:de:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:F3:EB:C2:CB:63:66:A3:CA:20:37:11:EA:25:4D:15:01:AC:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/14
Signature Algorithm: sha256WithRSAEncryption
12:83:62:6e:9d:59:54:4e:10:2c:39:50:61:70:c8:ab:35:1a:
76:9a:99:9c:d5:41:71:e2:6f:3a:63:2c:ae:77:cb:f6:c8:5b:
35:32:2c:29:f9:f6:e6:f8:dc:9a:f8:16:2d:c8:2b:df:51:8e:
86:72:70:22:7a:9f:31:88:0f:da:4c:a1:2b:49:e7:6c:69:02:
f7:21:9d:6a:75:64:ac:6c:c9:8c:88:a9:91:9f:8d:50:f8:2f:
5a:d7:8e:2d:fe:94:58:e2:d5:52:2d:5f:c0:0f:47:0c:20:25:
b6:67:25:71:0c:d0:17:cb:69:14:a1:00:82:66:eb:20:ea:9d:
f1:14:97:28:e3:90:00:dc:4d:30:49:1a:36:39:ac:a4:33:36:
15:df:ad:7f:5d:87:c3:2c:7d:75:39:d4:fc:aa:18:75:f9:5b:
59:d8:6e:ca:0d:d8:e2:9a:77:bf:43:0c:89:37:60:75:6e:86:
0e:45:64:c0:27:4e:59:5d:e7:aa:74:53:05:53:85:ec:b4:a8:
01:c6:5e:e0:f8:aa:32:5a:b8:61:82:16:5f:9e:27:1b:d6:a3:
d7:52:77:d5:3c:0c:22:90:1c:4e:3d:a3:78:88:e0:32:f0:8f:
5d:85:bb:43:cc:03:f0:38:a0:2e:d0:17:20:a1:5b:bd:1f:a0:
ee:64:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net