Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/19ed8e91-54d7-4564-8b59-b6260df59d4d.roa
File: 19ed8e91-54d7-4564-8b59-b6260df59d4d.roa (raw, json)
Hash identifier: TEO8xjB+CMpkeKthZVD950u/om1OXyKpEJ5TTF+/16M=
Subject key identifier: 72:CC:33:18:03:E8:AD:1B:42:85:B6:07:16:72:4C:88:AF:8E:DA:B6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 285517FCD7DE6642B3510D4E155D64EFFCA2E532
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/19ed8e91-54d7-4564-8b59-b6260df59d4d.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.34.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:55:17:fc:d7:de:66:42:b3:51:0d:4e:15:5d:64:ef:fc:a2:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=af9aafff03c2136a5e871582a737859593567f142c503735d0904abc7a9e7200, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:3a:c5:79:bf:55:ef:79:3d:64:06:50:5a:
91:55:38:6a:12:33:be:46:6c:b2:2b:60:56:65:9f:
cd:ef:92:ab:4a:5b:d5:d3:23:0f:8c:2c:1c:15:ca:
59:fb:d4:dc:bc:7f:d8:34:69:78:df:c9:ac:01:6e:
64:f5:9f:cd:8c:fc:c4:23:8a:6d:90:e2:fa:07:d8:
fc:04:c6:6f:6d:6c:3f:76:7a:d2:14:f6:3c:ff:e2:
3b:31:e2:80:a8:52:6c:df:0a:ca:4f:03:ef:12:93:
d9:f2:cf:1e:e8:8f:f6:ce:0a:92:f9:f9:a1:0d:54:
5e:2d:90:a0:46:f6:ed:61:7b:20:44:7f:41:5a:e3:
db:af:8d:e7:95:3c:ae:38:7d:8a:d2:6a:15:f4:16:
10:7c:af:69:c0:89:98:10:b4:c3:22:6b:7d:00:37:
0d:c7:cb:2b:38:b7:18:a0:35:94:81:d7:6f:6d:dc:
6b:f8:cd:e6:a1:a9:fc:59:71:ea:06:c3:63:d9:00:
00:a3:18:68:67:9b:6e:86:9c:cc:e7:7b:88:7b:2f:
85:27:83:84:46:42:c3:17:6b:b4:56:ed:6b:51:61:
a8:48:ca:fa:39:40:79:69:59:ef:3f:51:38:3d:24:
bc:59:57:09:8b:89:c3:8a:66:c5:f2:f4:12:fb:e0:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CC:33:18:03:E8:AD:1B:42:85:B6:07:16:72:4C:88:AF:8E:DA:B6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/19ed8e91-54d7-4564-8b59-b6260df59d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3f:7d:e5:97:8b:1d:43:8c:f5:6d:f1:8f:18:b7:22:ba:6d:bf:
06:4a:a2:19:53:00:18:7c:c1:53:72:54:07:ac:82:d8:32:c0:
15:47:73:6e:46:dd:76:91:a9:bf:e1:cd:b9:3e:c4:4f:59:eb:
b4:0a:58:2d:88:87:a6:81:15:3e:e7:f4:36:5e:0e:03:b5:5d:
fa:3a:e5:d9:d7:8c:e7:32:ce:e8:0c:3f:65:14:4c:3b:dc:33:
70:31:7b:6c:dd:6c:cf:e8:f0:ea:5c:a7:e9:27:99:be:09:f2:
41:4f:03:d7:ed:5a:92:c4:69:67:63:57:87:43:bf:fa:b0:75:
31:1f:e5:2e:61:84:3e:81:24:72:03:d7:25:be:26:1c:86:14:
78:97:88:f9:b8:23:1a:6f:f4:6f:01:3a:a1:99:68:c9:32:20:
0e:7f:17:f7:90:55:9f:bb:34:f1:71:e8:50:3c:de:d9:38:15:
fc:54:16:d2:ba:0d:8c:42:0a:37:e6:a8:78:d6:48:34:65:d2:
f0:b4:ad:9e:85:00:23:04:8e:f9:dd:af:97:10:48:e5:ea:92:
1c:e2:f5:94:a2:64:11:7e:cc:1f:fa:d4:21:4c:81:14:ac:94:
57:09:6f:0a:dc:0d:b9:c0:d6:3e:82:ba:0e:e5:de:9c:1e:73:
09:e8:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net