Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16e3842c-0679-4aa3-bd71-e66ff760467d.roa
File: 16e3842c-0679-4aa3-bd71-e66ff760467d.roa (raw, json)
Hash identifier: Q6LRin/cVKAtHYL2XorQLL46kk+68cKQCDXuCEDWfb4=
Subject key identifier: 62:E0:BB:07:F4:69:7D:C5:72:F0:F7:8C:8F:1C:27:D4:B5:36:12:45
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 445097093DE0974F220B373BA0259C773EAF2516
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16e3842c-0679-4aa3-bd71-e66ff760467d.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:50:97:09:3d:e0:97:4f:22:0b:37:3b:a0:25:9c:77:3e:af:25:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=13d97e2dedb1bdb802e6276609db3675aec24c0a30398557238744a71749e337, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:b9:12:04:ee:d2:f5:51:26:09:70:b2:2a:
eb:4d:08:f4:61:d3:9d:1f:36:30:4a:8b:a7:33:ae:
79:d9:b2:0e:3b:13:28:7c:a0:31:b7:ac:e6:d9:d6:
c5:a0:15:8d:0f:17:3d:df:5e:02:7e:85:7a:bc:70:
7c:a3:d9:da:6b:66:1c:a5:07:58:37:ba:89:52:14:
62:aa:7b:7f:e9:92:26:05:97:f5:64:4d:51:20:79:
85:5c:15:fe:39:cc:6a:e9:06:da:4d:07:a6:40:0c:
71:76:40:96:35:de:67:e3:99:af:21:e6:99:30:ea:
45:0a:9a:02:30:15:1c:4b:49:61:7b:dd:3e:48:56:
1c:84:5d:1d:00:80:70:15:d9:49:d4:8f:87:bd:07:
33:1c:fa:4c:45:0d:28:10:e8:f3:5b:29:06:cd:50:
f0:13:54:97:62:76:ad:fe:cf:dc:f6:55:ed:54:bf:
db:72:6d:73:86:3f:85:67:58:69:6c:e0:5f:68:a4:
bc:33:5c:17:a2:b6:3d:b7:9d:f0:8d:b5:e5:98:e3:
82:04:d4:42:b7:98:3a:f9:17:2a:ec:f5:2c:29:9c:
95:24:21:81:8b:2e:59:0c:7b:93:a9:21:62:64:58:
d4:41:77:d2:ac:1c:30:a5:92:c5:8c:a4:27:07:1b:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:BB:07:F4:69:7D:C5:72:F0:F7:8C:8F:1C:27:D4:B5:36:12:45
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16e3842c-0679-4aa3-bd71-e66ff760467d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:46:88:4f:68:14:2f:43:f9:16:7f:ef:5a:db:35:17:4a:45:
69:e2:62:8f:f3:79:87:ce:ba:0c:1f:2a:03:44:8c:a1:b8:ba:
c6:ed:00:a6:e8:3d:86:cd:fb:76:79:2d:b5:c2:77:03:be:c8:
f4:58:81:9e:c0:ce:70:a5:7f:42:76:e0:39:de:3a:02:8e:4c:
0a:f0:e2:e4:ab:e4:46:1e:2b:6c:23:96:fc:28:e4:66:36:97:
8f:98:7f:85:e2:c6:bd:a1:01:10:61:6e:5a:4c:01:e3:e9:04:
b9:84:6e:98:03:ff:79:3c:90:a7:32:7f:aa:a1:24:d2:14:94:
31:2a:59:9e:c8:4c:db:68:46:2c:cb:88:ef:5d:ae:e1:ea:55:
7d:78:1e:25:ec:57:b0:26:e9:13:75:70:4e:46:78:18:d7:8f:
fb:eb:df:a6:97:08:63:16:24:4a:dc:4c:a2:31:b8:97:3c:0a:
be:42:e9:88:6b:d8:d2:2c:bb:3e:81:01:d7:41:12:dd:c4:0a:
3e:10:45:fa:0a:0b:fe:09:5b:4d:64:dc:1f:a1:d6:12:8a:9b:
df:2e:3d:65:eb:6f:c1:9b:a0:85:c7:55:4b:98:a3:cc:ae:fd:
6d:84:63:72:46:7b:58:c5:5b:12:9b:e2:78:55:90:eb:4b:e1:
ee:4a:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net