Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15ca3bfd-cdcf-488b-a7f1-a2dfb7e29288.roa
File: 15ca3bfd-cdcf-488b-a7f1-a2dfb7e29288.roa (raw, json)
Hash identifier: OMiCzchAj+zk8KlsuUbWK57TjmrxLkWISjH8Kg7rm8E=
Subject key identifier: 22:52:C6:D2:15:3B:A8:8C:BE:64:DC:FA:11:A7:7C:D6:2B:12:97:CD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1AFE7FB45F9F439BEC7B1CE5C18766B058CD83D6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15ca3bfd-cdcf-488b-a7f1-a2dfb7e29288.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fe:7f:b4:5f:9f:43:9b:ec:7b:1c:e5:c1:87:66:b0:58:cd:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=d4bf977c166d3734fb31653baaff310202f1e0596da15a14c2a365a986fe9de6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:b7:85:07:7f:8e:4d:66:43:9b:39:ba:0d:
c7:6e:19:ad:32:37:2b:b0:f3:b8:72:fa:db:92:05:
bd:a4:ae:18:9e:4e:9e:a1:c3:13:94:96:3c:11:1c:
86:ca:0e:0f:11:ed:5e:47:9d:7b:64:5f:f6:c3:51:
7a:c5:93:85:84:c7:3c:7c:d7:10:36:49:89:e0:d6:
1b:0a:9e:26:28:aa:b1:97:6b:0d:68:07:3c:c7:7f:
f2:0f:74:8d:d3:e5:19:9f:90:61:f5:41:88:a2:2a:
bd:23:35:5c:33:b5:8f:f4:03:6c:c0:87:b5:8e:fc:
98:46:d8:4a:63:68:e2:e5:21:f2:8c:b7:d7:7a:21:
48:33:a5:d0:f6:23:8b:16:51:07:95:ea:31:c3:07:
d9:ce:b9:85:0a:f6:ff:e7:f4:00:c9:1b:70:ba:b9:
6a:69:00:50:58:ee:c9:82:27:c4:c5:71:90:d9:27:
e9:86:48:e5:c0:e4:e6:4e:34:ee:0e:95:e6:58:37:
f9:72:70:f2:bd:fd:d7:20:6c:aa:99:1d:3d:04:90:
5b:77:16:0a:fb:4e:21:5c:e1:ae:25:14:1e:d3:78:
da:b5:df:5a:b3:50:09:d8:cf:1d:b0:5d:2d:a5:db:
bf:75:06:9d:4e:88:8a:6d:b9:29:81:5a:c4:a4:9f:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:52:C6:D2:15:3B:A8:8C:BE:64:DC:FA:11:A7:7C:D6:2B:12:97:CD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15ca3bfd-cdcf-488b-a7f1-a2dfb7e29288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/14
Signature Algorithm: sha256WithRSAEncryption
64:5d:a4:4e:81:2a:fa:61:be:8d:76:a7:8e:6e:98:56:dd:da:
df:0c:87:57:e7:a5:00:45:42:94:96:f8:eb:fc:a5:1d:78:8a:
eb:79:8b:e2:c5:61:48:68:65:e6:f0:d5:6e:97:05:54:58:c9:
ff:0b:31:61:3a:63:88:60:f4:10:65:ff:79:68:2d:cd:8f:a7:
6c:c7:18:32:c1:78:48:30:93:f8:5a:f4:f3:f2:d9:6e:98:8a:
14:1d:59:a7:59:e0:7f:ca:ec:c7:9f:32:da:3a:fb:38:cd:93:
90:e1:28:40:d2:25:06:2a:44:86:bc:89:b2:93:e9:9d:62:de:
76:85:25:bc:c6:b5:8f:d9:4f:38:b4:c0:e2:6c:3a:b8:cd:3d:
b0:9b:c7:43:06:a3:0a:f4:3f:91:21:1e:50:60:f8:8b:d7:03:
bd:ad:1c:53:3a:5c:a0:40:cd:f4:96:f3:c9:4b:55:6f:28:c2:
56:36:ab:87:51:e7:83:5c:8b:07:24:69:50:c3:20:cd:61:da:
31:39:12:f2:03:ce:e1:29:5f:59:64:a4:16:ab:05:d9:82:aa:
1a:91:23:f2:88:72:9e:46:7c:c4:ee:79:f3:a9:3d:d3:19:c2:
26:88:f4:d9:c1:9c:1d:79:a9:c9:46:0b:2f:c9:58:8b:de:3c:
b0:0f:f5:58
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUGv5/tF+fQ5vsexzlwYdmsFjNg9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTkwMDAwMDBaFw0yNDEyMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ0YmY5NzdjMTY2ZDM3MzRmYjMxNjUzYmFhZmYzMTAyMDJmMWUwNTk2ZGEx
NWExNGMyYTM2NWE5ODZmZTlkZTYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQnt4UHf45NZkObOboNx24ZrTI3K7DzuHL625IFvaSuGJ5OnqHDE5SWPBEc
hsoODxHtXkede2Rf9sNResWThYTHPHzXEDZJieDWGwqeJiiqsZdrDWgHPMd/8g90
jdPlGZ+QYfVBiKIqvSM1XDO1j/QDbMCHtY78mEbYSmNo4uUh8oy313ohSDOl0PYj
ixZRB5XqMcMH2c65hQr2/+f0AMkbcLq5amkAUFjuyYInxMVxkNkn6YZI5cDk5k40
7g6V5lg3+XJw8r391yBsqpkdPQSQW3cWCvtOIVzhriUUHtN42rXfWrNQCdjPHbBd
LaXbv3UGnU6Iim25KYFaxKSfb98CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQiUsbS
FTuojL5k3PoRp3zWKxKXzTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MTVjYTNiZmQtY2RjZi00ODhiLWE3ZjEtYTJkZmI3ZTI5Mjg4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjNgMA0G
CSqGSIb3DQEBCwUAA4IBAQBkXaROgSr6Yb6NdqeObphW3drfDIdX56UARUKUlvjr
/KUdeIrreYvixWFIaGXm8NVulwVUWMn/CzFhOmOIYPQQZf95aC3Nj6dsxxgywXhI
MJP4WvTz8tlumIoUHVmnWeB/yuzHnzLaOvs4zZOQ4ShA0iUGKkSGvImyk+mdYt52
hSW8xrWP2U84tMDibDq4zT2wm8dDBqMK9D+RIR5QYPiL1wO9rRxTOlygQM30lvPJ
S1VvKMJWNquHUeeDXIsHJGlQwyDNYdoxORLyA87hKV9ZZKQWqwXZgqoakSPyiHKe
RnzE7nnzqT3TGcImiPTZwZwdeanJRgsvyViL3jywD/VY
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net