Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1d0fc19c-dd37-4056-b427-b389226e4122.roa
File: 1d0fc19c-dd37-4056-b427-b389226e4122.roa (raw, json)
Hash identifier: TpwOVduP8kadPjXC5SvS1KUUX8wMSunRPDxwX2wUDsk=
Subject key identifier: 22:C0:2B:3F:65:A9:D5:4B:5E:8A:B7:41:26:73:39:53:B6:73:31:E2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4BEDFF4158A2AC44ECAAE10F3F75B81D26D23070
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1d0fc19c-dd37-4056-b427-b389226e4122.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.122.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ed:ff:41:58:a2:ac:44:ec:aa:e1:0f:3f:75:b8:1d:26:d2:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=92174ea3948ab5ef1623d48826ecd83234c0a4ec1cf09fa801195df292c6a2c6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:e6:34:23:e6:20:d3:3c:44:d6:ac:41:fd:
fc:f3:c5:23:46:f9:c0:4f:e4:67:a2:d8:8e:00:e9:
c4:28:c7:b3:0a:19:e8:ec:23:fa:2d:5b:74:ee:b1:
67:3e:ba:7a:ef:28:c9:19:7f:b0:ad:4a:50:98:b9:
70:4b:25:1c:51:f4:26:e1:b1:98:b2:d8:71:f2:ce:
7f:f8:60:13:2c:5c:c5:2a:1d:c2:06:00:6d:a6:e9:
7f:62:96:8c:27:42:bf:ac:cf:c3:36:43:2c:71:f3:
3f:99:f1:94:30:83:b0:b6:8c:50:65:46:ad:f1:9d:
d4:15:1f:53:3c:1c:ce:14:b9:83:1c:42:b7:64:10:
9d:15:3e:65:c1:0f:37:90:d3:e2:1d:34:08:41:9f:
41:1f:15:b5:08:5b:68:1b:7d:b3:f4:cd:60:82:8b:
47:b1:f7:5d:5c:ec:e9:4e:ae:52:1f:fb:38:b4:2d:
97:ab:c5:ca:dd:33:2c:c9:4c:03:c7:c0:d0:fc:91:
3a:7e:8c:fa:5e:07:1f:6b:f5:d7:1d:9c:54:a5:ce:
f7:9b:3b:c6:a9:3f:f9:9a:9e:09:be:6a:70:e5:02:
d2:af:09:af:84:90:12:c8:1a:2b:1a:b6:11:c0:ee:
92:39:4c:e6:72:a4:ed:5d:5c:b0:68:d8:76:68:ef:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:2B:3F:65:A9:D5:4B:5E:8A:B7:41:26:73:39:53:B6:73:31:E2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1d0fc19c-dd37-4056-b427-b389226e4122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
61:bc:bf:93:9c:de:fa:3c:7a:7e:68:d6:bf:84:1d:f2:16:31:
6f:89:4d:70:f8:09:b4:53:29:00:8e:94:4f:4f:83:46:30:d0:
66:f7:e7:a5:63:8a:fe:8c:2a:57:9a:bd:6b:16:ff:01:1d:2d:
03:a5:4d:09:ae:f6:12:65:73:92:e5:91:22:ef:b6:a8:3c:4e:
c0:56:af:4d:d1:f1:0c:d0:e6:10:ec:7b:4c:44:60:a9:bb:51:
a6:3d:bc:b7:f9:7c:d8:a6:5f:5b:8f:88:89:08:70:c9:42:74:
c6:fe:53:27:2d:c4:09:f9:d7:27:fd:b4:4c:b7:4a:f8:5e:61:
d6:e3:fc:c6:62:9d:b2:36:e9:37:00:62:71:95:31:48:06:7b:
a1:45:f2:a2:35:d6:4c:10:76:d3:61:96:82:1d:f1:59:af:fa:
16:5c:60:b4:10:12:e8:e8:2b:91:e7:47:91:30:da:b8:93:ba:
fd:6f:7d:42:13:04:30:74:46:27:90:19:af:75:d6:a5:49:6b:
b5:9b:42:78:f1:02:ca:08:44:fd:39:9c:dc:9d:8d:26:2e:3e:
5d:11:f1:b5:d0:79:35:17:fa:8b:37:9c:5b:18:dc:57:a1:7e:
98:a9:7a:49:d1:21:78:1c:f9:1c:3b:40:33:ab:0b:4e:61:69:
37:b7:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net