Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0e6cf8cb-029b-41b8-aa05-7310f7f141d6.roa
File: 0e6cf8cb-029b-41b8-aa05-7310f7f141d6.roa (raw, json)
Hash identifier: QaFKSZnSMHk4TrBaBcDoPyK+BMhuHDfDmDb2XtyCZzc=
Subject key identifier: 5E:84:AE:34:68:58:2B:7E:29:BD:F9:37:72:1A:B2:17:CF:A4:99:9F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 645E3488293AB9851DCD26E7AB7F8A06A5D97A13
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0e6cf8cb-029b-41b8-aa05-7310f7f141d6.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.76.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5e:34:88:29:3a:b9:85:1d:cd:26:e7:ab:7f:8a:06:a5:d9:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=7ec9dea2d673f0975addc90b3ccdcde53c10e27c3c9ca80d1cd0e16de53915f6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:05:6e:f4:ab:de:7a:a9:63:92:1e:be:eb:
e0:1d:26:6f:6d:bb:bf:29:d4:a6:6b:30:ca:4f:25:
49:09:a8:bd:4b:fa:10:a3:8c:15:0b:42:95:db:b6:
01:33:d3:cf:6d:22:90:b5:f2:dd:60:b1:48:fc:96:
40:e7:b5:34:5a:40:0e:5f:51:67:ac:78:31:95:dd:
7c:ae:9a:c5:bd:92:d5:2c:26:1f:bb:7e:c7:a4:23:
05:f0:13:10:b6:15:09:97:ee:79:df:73:67:db:2a:
46:8e:4c:11:aa:95:d9:7e:6b:5c:9c:4c:76:05:68:
59:29:ca:43:6f:94:ef:b0:9c:47:67:26:00:07:c6:
ec:fc:a0:9e:15:3d:d5:be:d2:bc:7d:64:5c:98:3b:
cf:10:22:2f:df:50:f1:95:c7:5f:f1:d8:3e:b3:0e:
e0:ce:6c:df:9e:c4:49:74:c7:4d:75:a5:d3:3c:e0:
c8:30:b5:3c:70:c0:7f:ad:8d:76:2c:2b:35:ab:60:
4d:90:a1:d5:fd:71:d2:9f:5c:b6:e1:4a:1f:70:22:
8d:c1:aa:cc:1b:da:c0:37:f7:26:d4:34:9b:c8:45:
e0:cc:15:74:09:17:7b:0e:ea:ad:ec:7f:bc:47:98:
74:27:bf:18:5e:14:f8:df:da:6d:3d:2b:29:42:42:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:84:AE:34:68:58:2B:7E:29:BD:F9:37:72:1A:B2:17:CF:A4:99:9F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0e6cf8cb-029b-41b8-aa05-7310f7f141d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:1e:00:98:f5:f2:b2:7b:41:5c:f2:4a:37:58:dc:db:47:88:
1a:bc:1a:22:ed:2e:6d:e1:d0:b2:ff:40:1f:7a:76:f0:26:81:
f5:ad:ed:48:6a:25:6c:a5:ad:56:dc:fb:1a:c8:d6:e1:05:c6:
51:f2:70:9f:2d:da:b2:24:66:28:98:80:c6:d3:57:c3:31:7b:
bf:18:fe:02:ba:49:42:ab:94:b1:0a:a6:b0:86:82:9b:33:ad:
46:ff:75:8c:c8:33:27:be:6e:eb:0a:27:c8:02:a4:60:a5:04:
34:d1:df:ae:06:ca:b1:19:1b:5d:0e:bd:4e:67:15:9a:59:02:
70:04:53:94:cf:8e:fe:fa:bc:d1:45:bb:59:25:56:86:2c:b1:
bb:2e:c5:b0:a5:1a:e1:5c:3f:f4:f8:ce:79:56:e1:4b:71:b8:
c9:b5:57:a2:bb:50:fb:31:90:7f:ea:d2:12:7a:71:30:38:01:
1f:29:8e:12:4e:bb:4f:9f:54:af:2f:64:7c:e4:db:6a:21:95:
1b:a9:54:b1:40:71:f9:49:15:d8:b4:a0:60:1c:74:eb:27:b4:
7c:33:c9:29:04:24:6e:1d:07:8e:eb:88:2f:ed:eb:86:75:cd:
bf:00:69:3e:ab:c9:55:92:20:9d:34:5d:33:18:dc:b3:be:be:
2e:8f:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net