Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1034a10f-29ad-43d5-9d62-abfa393cb0a3.roa
File: 1034a10f-29ad-43d5-9d62-abfa393cb0a3.roa (raw, json)
Hash identifier: BiS6YuAE2Na6uBQ8U9JlKuKotgcCga3LRVHTGJC2ntQ=
Subject key identifier: 93:6E:A6:51:65:DB:BD:1E:78:F4:B7:1D:9E:C5:8F:50:A7:19:FB:29
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3ECA6461612AEFFBF815602CED1154646A86CFC5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1034a10f-29ad-43d5-9d62-abfa393cb0a3.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ca:64:61:61:2a:ef:fb:f8:15:60:2c:ed:11:54:64:6a:86:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=bdf7fb7d90180a64a3163f45d9b4705a6d17ed1231c373cd0d9740cd620bcced, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:83:b0:ad:37:c2:31:7b:5a:dd:a8:12:97:
ba:50:4d:42:fe:0f:2c:53:58:15:73:eb:a4:86:f1:
4f:e4:3c:1a:ab:14:c9:6b:24:94:e3:cd:ed:46:b7:
9e:8e:7e:47:35:8f:2f:62:4c:24:dd:49:17:0c:ec:
2e:05:c3:a1:09:f8:81:07:94:18:61:35:d9:ba:f6:
d9:98:75:0e:4a:b1:3f:af:8b:0e:e3:ec:b8:ae:c9:
89:dc:0e:2b:43:9c:70:77:ca:36:15:c6:d2:4e:48:
0c:a9:54:67:2c:d0:94:cd:c8:ae:db:c4:b7:c4:d6:
16:74:de:3e:2d:a3:ca:42:57:46:f0:53:34:7b:eb:
59:27:cf:f3:b5:2b:bc:c3:b3:2e:d8:d9:fa:d1:fa:
a3:03:eb:13:c8:74:de:97:a7:49:d6:f6:95:cc:3d:
2a:1d:d2:bf:a6:6c:e6:a4:89:98:64:5d:65:88:e4:
a5:5a:7d:45:59:3b:0e:fd:1a:91:ab:16:b4:6f:1b:
f2:93:46:7c:4a:48:4f:ab:ae:bf:1e:69:e1:fa:96:
24:fc:4b:40:50:b0:51:6d:f3:92:70:d8:f8:2a:b2:
76:e8:de:0b:fc:2a:cc:48:04:4b:ae:a8:02:04:40:
cd:e5:5a:a1:92:1c:09:07:96:67:17:77:e9:e0:c1:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:A6:51:65:DB:BD:1E:78:F4:B7:1D:9E:C5:8F:50:A7:19:FB:29
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1034a10f-29ad-43d5-9d62-abfa393cb0a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:14:09:3a:03:49:e7:67:a8:40:89:2f:f0:eb:95:21:b3:6b:
cf:03:ed:a3:3a:04:a0:a6:b7:d6:df:c4:af:09:dd:77:ed:ab:
39:45:cd:2b:e9:d6:58:05:a9:a5:b3:e6:a1:c6:03:c2:af:7a:
5f:04:73:a8:75:8d:32:36:4d:21:cd:c7:91:db:b7:19:5f:c5:
a5:08:d2:f8:39:5d:99:24:10:d9:5b:73:3e:54:8b:2b:e9:ff:
9f:66:1c:d1:1c:82:33:f7:c0:ca:d8:40:64:40:bb:52:e3:d0:
2a:e8:79:ca:57:f5:38:ed:cc:d9:b9:79:93:00:cf:7f:d9:18:
ce:40:69:b2:fd:51:2c:35:2e:cd:26:db:08:f5:ec:de:8b:ff:
fc:21:77:99:f6:25:28:fd:0e:a7:64:39:50:e8:ac:c1:50:33:
19:f8:a1:3a:1e:d8:73:ad:49:bc:e9:91:79:43:30:9a:c0:8a:
9c:36:da:99:37:1d:40:6e:2c:1f:53:ed:da:7c:7c:ce:17:73:
e5:65:99:ae:53:2d:3a:ca:3f:28:b0:f8:f1:a7:da:87:b2:86:
c8:34:ef:d7:62:ce:4d:1a:b3:c9:37:eb:a9:c7:86:d4:bb:82:
99:0f:e5:1e:6a:36:00:18:2b:24:e6:f5:c5:3f:0d:8e:d3:74:
31:b1:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net