Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa
File: 17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa (raw, json)
Hash identifier: wS1kabi5vY1LRWssb2mRzJCofHlXMhbsblCpf0LvQvw=
Subject key identifier: 49:F1:17:34:A4:A5:DF:A2:6B:99:FA:03:3E:9B:79:F1:6B:B7:7D:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 30FF5D62783D7A4F9161D6194C0ADBED9844837D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ff:5d:62:78:3d:7a:4f:91:61:d6:19:4c:0a:db:ed:98:44:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=19471b1f44889a8e611d827d8515006dcdbf9c0aae77779152252a14550a71eb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:21:73:72:4d:9e:d3:10:6b:2c:6a:11:c8:
30:bd:f6:05:ee:de:df:31:19:b7:aa:88:11:25:ec:
14:12:40:97:ce:56:2f:79:c5:6b:8d:de:6e:9c:46:
0b:14:92:f5:bb:5b:ee:b8:55:6f:31:f6:ff:da:e6:
96:fc:03:fc:68:e9:20:cf:41:d2:fa:35:f0:8d:91:
55:5b:35:65:30:ff:7c:79:43:4b:e2:a2:f0:7b:6a:
7d:81:7a:93:6a:f3:74:30:1b:9a:6d:83:8e:f3:25:
b9:26:fc:33:47:9f:cd:fb:d2:af:60:78:2e:69:58:
ce:f0:64:2b:a6:36:2c:d9:ed:e2:f8:86:96:0d:64:
da:33:3b:60:fb:d7:1b:6b:22:21:ac:4f:13:d2:bb:
7f:09:90:ab:35:40:33:bc:19:29:fc:89:1c:86:bf:
39:62:7b:48:4a:4a:97:6b:e2:fe:82:67:da:7d:d2:
34:c4:2c:58:9e:d5:92:51:09:43:0c:0c:ae:08:e8:
97:c4:6b:cf:05:63:95:86:cc:65:4d:20:b3:2b:91:
9c:c7:b8:c6:fa:79:cd:53:eb:15:a5:ab:d0:f6:f9:
a1:65:34:8b:ef:fd:ce:54:1b:67:a5:53:87:5f:80:
b1:37:8a:6b:a7:11:62:6a:a3:cf:4b:d0:99:5d:b8:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F1:17:34:A4:A5:DF:A2:6B:99:FA:03:3E:9B:79:F1:6B:B7:7D:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/17b57109-c3f8-4f4e-a1e4-f1969fd9dff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
87:93:fb:82:98:4b:a5:66:ed:5a:25:3f:86:40:ca:0b:e9:a8:
b1:d3:0f:11:05:ba:73:ef:90:29:e6:23:7c:53:f7:25:e9:85:
8b:cf:36:96:2a:f7:61:ca:07:a9:a7:64:4a:d1:a6:d2:9a:d4:
88:59:77:5e:95:0b:07:5c:7a:82:5f:b1:2f:b8:23:93:38:30:
7a:2b:d3:94:87:5c:95:f2:4c:e2:9c:fa:be:71:63:bf:9e:6a:
25:22:43:08:fb:42:60:cf:92:d8:ff:04:f0:41:65:b9:1d:97:
b3:85:bb:95:1d:f8:e2:6f:a7:2b:e4:52:ab:78:34:85:2b:e0:
38:4e:0c:fe:a0:8e:d9:d0:58:b6:ef:cd:be:28:bf:52:9f:50:
59:41:48:43:91:08:4f:93:35:83:e6:97:f2:e7:9e:65:d7:24:
d6:7d:cf:c9:d0:3b:0f:97:e1:1a:fa:2b:00:a7:87:7e:37:79:
c3:8e:5d:a9:52:9a:0f:a7:8f:56:75:20:61:31:90:48:88:76:
f1:17:70:be:92:cf:41:a3:a3:d5:89:a7:65:1c:a5:be:12:b0:
86:bf:70:11:ac:3b:c7:82:e4:8c:41:0f:a1:ad:e9:b7:5e:2a:
57:71:0b:61:0c:b8:87:27:ac:ae:5f:b3:dc:98:91:4d:ee:01:
9f:0d:64:98
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUMP9dYng9ek+RYdYZTArb7ZhEg30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDE5NDcxYjFmNDQ4ODlhOGU2MTFkODI3ZDg1MTUwMDZkY2RiZjljMGFhZTc3
Nzc5MTUyMjUyYTE0NTUwYTcxZWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIkUIXNyTZ7TEGssahHIML32Be7e3zEZt6qIESXsFBJAl85WL3nFa43ebpxG
CxSS9btb7rhVbzH2/9rmlvwD/GjpIM9B0vo18I2RVVs1ZTD/fHlDS+Ki8HtqfYF6
k2rzdDAbmm2DjvMluSb8M0efzfvSr2B4LmlYzvBkK6Y2LNnt4viGlg1k2jM7YPvX
G2siIaxPE9K7fwmQqzVAM7wZKfyJHIa/OWJ7SEpKl2vi/oJn2n3SNMQsWJ7VklEJ
QwwMrgjol8RrzwVjlYbMZU0gsyuRnMe4xvp5zVPrFaWr0Pb5oWU0i+/9zlQbZ6VT
h1+AsTeKa6cRYmqjz0vQmV24gRkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRJ8Rc0
pKXfomuZ+gM+m3nxa7d9gDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MTdiNTcxMDktYzNmOC00ZjRlLWExZTQtZjE5NjlmZDlkZmY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPKMA0G
CSqGSIb3DQEBCwUAA4IBAQCHk/uCmEulZu1aJT+GQMoL6aix0w8RBbpz75Ap5iN8
U/cl6YWLzzaWKvdhygepp2RK0abSmtSIWXdelQsHXHqCX7EvuCOTODB6K9OUh1yV
8kzinPq+cWO/nmolIkMI+0Jgz5LY/wTwQWW5HZezhbuVHfjib6cr5FKreDSFK+A4
Tgz+oI7Z0Fi2782+KL9Sn1BZQUhDkQhPkzWD5pfy555l1yTWfc/J0DsPl+Ea+isA
p4d+N3nDjl2pUpoPp49WdSBhMZBIiHbxF3C+ks9Bo6PViadlHKW+ErCGv3ARrDvH
guSMQQ+hrem3XipXcQthDLiHJ6yuX7PcmJFN7gGfDWSY
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net