Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/20422b97-bbd3-43a5-bd9e-56380296a638.roa
File: 20422b97-bbd3-43a5-bd9e-56380296a638.roa (raw, json)
Hash identifier: foBnKRfJ6J2Iyu0JHatV3XaIf3UgyJfxg8OoTQHUCQc=
Subject key identifier: 77:A4:15:EE:5F:E3:2E:CE:8E:13:E6:69:65:7F:F8:32:5D:09:20:F1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3BD4DB276BED70F1F00E918F524A165E92CC76E0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/20422b97-bbd3-43a5-bd9e-56380296a638.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d4:db:27:6b:ed:70:f1:f0:0e:91:8f:52:4a:16:5e:92:cc:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=21651232beec8aed2dadf18db77124392067c5abf952572fb8e6f9cfb4ec3d43, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:d8:5e:31:36:84:7a:a7:5f:a3:ef:20:31:
60:90:52:e6:1b:58:c1:a6:cb:e2:a7:8a:0d:6f:9f:
19:4b:9a:54:0b:64:33:e9:9a:07:7f:ed:bd:e6:32:
86:81:c5:d8:09:56:db:3f:1d:a4:08:c1:23:7b:f0:
2d:37:03:42:90:43:3b:c9:0c:c9:58:cc:ae:5b:ec:
37:0c:ab:16:3b:05:40:dc:c6:09:85:86:3e:3b:57:
dc:1e:f9:cd:c1:ab:19:49:c7:aa:64:ab:fe:8a:97:
f1:93:42:7a:4a:c9:99:a9:1c:94:fb:a3:65:1b:42:
f4:16:34:c7:08:26:40:f2:3d:85:b3:c8:a4:3b:ba:
4f:aa:04:96:d5:af:5b:88:45:cf:68:5f:c8:67:86:
1c:ba:0a:bb:56:b0:03:72:fa:aa:72:bc:fc:e9:4c:
a5:b8:21:3b:7f:0f:99:24:58:89:3d:cb:04:f3:39:
db:22:b7:37:95:a1:66:38:62:ff:94:18:22:1d:51:
d9:6c:83:89:36:4e:9b:bf:30:82:fc:1a:54:21:13:
e7:06:7d:c1:6e:74:d0:13:be:5c:4d:ba:e8:1a:fc:
15:10:d7:38:c9:56:c8:ae:27:86:d4:c3:fc:91:17:
69:ef:e4:fc:fd:f2:02:c6:ec:93:b8:1d:7d:f8:c3:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A4:15:EE:5F:E3:2E:CE:8E:13:E6:69:65:7F:F8:32:5D:09:20:F1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/20422b97-bbd3-43a5-bd9e-56380296a638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
29:94:37:be:04:8a:1c:b6:c7:1f:b6:a9:3c:14:49:cd:33:0b:
b3:58:2d:14:85:de:36:28:e8:a5:de:39:5c:b2:aa:88:46:d2:
b6:c4:22:33:a9:df:22:c9:c3:2e:f5:15:fb:7b:94:ad:eb:e9:
bf:ba:bb:23:75:45:11:83:1c:b9:57:5a:4e:df:d7:60:af:7c:
da:30:2d:3c:0c:fb:96:39:a8:00:dd:0b:b3:78:42:0c:9b:99:
6a:a4:39:4b:b2:92:b3:dc:f4:a8:2c:65:c9:f9:5e:61:46:3f:
a9:14:4f:18:a8:6a:9d:1e:06:b6:2e:d0:02:44:b3:80:eb:7a:
b6:bd:20:63:88:85:d1:bd:98:8c:8f:6b:14:d5:e3:5e:0c:ff:
09:4f:93:19:48:2d:79:fd:a0:d4:f1:96:e9:92:d4:10:c2:b2:
f3:19:9c:ba:a2:3e:48:60:4b:30:a2:64:a0:8d:93:ea:e7:7d:
d3:7c:19:e6:70:98:f2:70:16:94:e2:d1:b6:da:04:c6:b1:f6:
bf:d0:fb:12:7a:e4:25:b3:d4:47:b4:46:40:3d:87:7f:47:b8:
04:12:a7:12:b6:b8:90:22:52:d7:fb:6c:28:6f:ce:76:fc:f0:
ab:0d:da:cb:83:79:d2:37:4a:f2:86:ec:73:0b:5c:bf:c0:bf:
e1:96:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net