Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17350a8e-5c2b-4c64-be1a-19d7141edd53.roa
File: 17350a8e-5c2b-4c64-be1a-19d7141edd53.roa (raw, json)
Hash identifier: KRX6fEy+l2y3E/5XaJk1aPVJWo3x1IOFSbFOa1XsBZ0=
Subject key identifier: E8:FE:4A:0F:0C:D4:F7:10:C1:2C:C3:E0:A3:02:CC:14:9B:EB:BA:28
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4C45E04CE00377756F9BC8FAA1C8A1687C988648
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17350a8e-5c2b-4c64-be1a-19d7141edd53.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:45:e0:4c:e0:03:77:75:6f:9b:c8:fa:a1:c8:a1:68:7c:98:86:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=33dda893305690c772c0792c3866834104e569b198e912b0b64def0ded4baffe, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:26:f1:ea:cc:96:e5:13:3a:19:bf:d0:42:
1a:2a:63:72:61:b3:a8:25:09:df:48:1e:35:c6:5d:
17:98:7e:60:0f:18:70:d4:a6:91:27:e8:25:d3:a4:
25:24:a0:e5:49:a3:ce:07:9c:be:04:15:95:b8:55:
2d:0f:b4:df:79:a5:b7:70:ad:d0:ce:90:09:97:0a:
35:d3:ab:f5:14:86:dc:eb:99:95:70:03:73:43:46:
55:94:59:14:f5:31:03:b3:01:b9:d0:97:5f:20:55:
31:e5:9a:36:24:fa:6d:d2:a3:27:5a:16:67:5a:28:
f5:f1:e7:24:5c:70:33:64:07:01:c8:a1:c3:e2:bd:
35:cb:54:79:c2:0d:58:2c:b7:48:f6:85:b0:1a:8a:
cd:6e:9f:02:49:90:f6:9b:cb:2f:89:a7:db:19:72:
46:59:6e:60:84:11:84:84:fd:d4:ee:9e:5d:3b:f2:
9b:6d:fb:f5:9b:2f:42:80:7d:2d:a5:2f:67:27:0e:
ee:12:51:fc:68:db:35:24:3a:3c:27:4a:09:c8:c5:
10:5e:16:bf:a3:34:28:7e:15:35:1a:8a:77:03:a3:
b6:32:c8:d1:19:b6:de:06:3c:7d:58:2d:4d:24:e7:
ab:cc:e2:3c:01:55:9b:e0:26:62:a5:1b:4f:ce:fc:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:4A:0F:0C:D4:F7:10:C1:2C:C3:E0:A3:02:CC:14:9B:EB:BA:28
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17350a8e-5c2b-4c64-be1a-19d7141edd53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:2f:8f:59:a4:c4:8b:0a:49:b0:b2:61:36:7e:54:65:fc:17:
72:0c:46:aa:55:d8:16:57:fe:cc:8f:df:0a:7f:ee:f1:44:ce:
ac:f2:1d:7f:78:96:92:be:d8:0f:d5:1c:dc:0d:66:ac:e9:4a:
e3:cf:be:1e:21:5b:5a:15:f2:4a:50:cc:9f:4a:5a:88:27:07:
55:ce:98:4c:3c:d3:70:50:cd:f2:c1:ad:b1:60:a5:95:8b:05:
ae:bf:bd:72:25:09:87:9a:7f:cd:9e:58:35:e2:3b:04:ff:28:
c8:d7:3a:f9:8f:f4:fd:d7:df:df:91:4a:be:27:f6:eb:a1:a2:
1a:66:3b:60:ef:42:ea:38:cd:27:52:6b:ce:c6:de:88:c9:03:
69:3b:55:43:e1:92:e2:40:e8:99:de:ab:2b:93:63:d6:41:d6:
60:57:8b:48:dd:88:c1:f5:63:c5:f6:83:88:b4:81:37:f2:77:
c9:a6:b3:31:1d:8a:78:6e:fe:2f:57:b4:b3:df:df:2e:31:76:
6d:bb:6a:fc:3f:a3:1a:b9:03:31:f6:f7:0a:55:58:02:0a:53:
e1:33:e3:a7:6a:43:49:ca:73:84:e1:7d:bd:4e:b7:4a:4a:41:
96:70:88:5c:3a:18:67:b2:f1:10:4d:3d:86:f7:79:17:e5:8f:
bf:0c:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net