Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1f695b88-30e9-49f2-9e00-4f3fa3d354b5.roa
File: 1f695b88-30e9-49f2-9e00-4f3fa3d354b5.roa (raw, json)
Hash identifier: b/CBKpI8Xs/b0lgciX9nzJTlywvveS7a87mrDI/zKGM=
Subject key identifier: F2:62:CD:26:A2:6A:07:6F:1B:5C:7B:CF:BF:DB:D7:6C:9D:36:72:D1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5D6CA29DB7D563442BAF15BF1FC4606729656B46
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1f695b88-30e9-49f2-9e00-4f3fa3d354b5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.82.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6c:a2:9d:b7:d5:63:44:2b:af:15:bf:1f:c4:60:67:29:65:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=c2e53c2bce92cba090afbf790c02ee1739d53c2f872130fbdc9df66ae7c4c2de, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:15:fd:9f:18:37:a9:0d:c9:4e:84:f5:44:
22:b6:80:fd:49:93:c8:a4:db:68:e1:66:f0:cf:3a:
05:5f:e4:0d:bf:5e:d6:76:5d:aa:24:5f:c5:5a:4b:
75:09:9a:ba:bf:6c:69:be:36:9b:47:45:81:79:53:
75:7b:12:51:c2:98:fd:e4:72:74:24:4f:20:83:f9:
24:df:20:ce:dc:63:f6:de:7c:d8:a7:2f:92:dc:bb:
3a:db:d5:fc:45:dd:40:f4:57:90:54:fb:0c:5b:5a:
e9:ae:74:b7:4a:36:94:bd:b0:91:56:79:0d:f9:70:
4d:d3:35:4f:fe:ba:6d:7b:2a:64:99:c4:94:ca:43:
c3:82:a7:7a:10:4d:71:32:fc:a7:82:e8:a4:16:9b:
9d:50:29:e0:a0:fe:ed:73:24:a9:1e:37:d7:dd:ea:
1d:4a:06:20:71:a9:a8:14:e6:8e:79:f3:0c:6e:a3:
31:4a:e8:1a:b5:df:56:02:6c:c4:e5:79:bc:61:52:
28:84:90:71:e2:68:fc:60:be:31:56:f1:b0:7d:32:
b0:9d:93:24:72:4c:a6:00:28:6a:38:c5:db:90:c6:
5f:f0:fb:87:e1:8d:ca:45:22:44:ee:23:32:ce:52:
43:46:c1:f8:26:fa:e9:45:11:3a:46:6b:0d:e7:28:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:CD:26:A2:6A:07:6F:1B:5C:7B:CF:BF:DB:D7:6C:9D:36:72:D1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1f695b88-30e9-49f2-9e00-4f3fa3d354b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:57:ee:24:56:0b:2c:95:a6:8c:e0:b6:6c:6f:4d:b5:cb:16:
72:f6:fe:eb:f3:35:1f:98:36:aa:73:7f:3f:27:47:ee:18:92:
d7:6c:2b:d1:7c:6d:36:fa:4a:b7:6c:39:8d:58:d9:db:ab:5c:
c4:1b:d2:ee:6c:cc:af:fe:77:e1:2c:f1:f6:08:28:1d:8b:45:
17:9f:a4:89:18:8a:03:3c:ed:c5:d2:d4:0e:e0:d2:71:e5:2f:
e5:00:42:9f:10:da:6b:35:f2:e4:aa:0f:e7:40:0b:e9:82:05:
9a:07:89:3f:62:f8:60:17:93:06:f3:18:65:59:a1:27:3a:64:
72:e8:54:73:ba:37:f6:b4:3c:87:2a:df:64:0f:b0:20:18:9c:
0d:ac:df:16:13:c0:45:0e:a1:dd:91:08:90:74:ce:41:b8:15:
20:bf:bf:0a:da:cc:28:ac:ce:e2:dd:26:7d:ff:63:83:05:82:
04:e3:c0:71:f2:bb:40:bb:4f:34:5a:24:8e:a9:18:fa:78:4d:
4e:e5:85:ce:43:48:31:45:6a:e5:86:2e:6d:af:76:ff:bb:25:
89:8c:aa:e2:af:63:f3:7d:5e:81:f8:a1:9c:ac:20:09:54:09:
c7:c7:a0:fb:bb:fe:25:17:5c:4e:bc:81:20:d7:85:b0:a9:08:
e4:d6:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net