Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2263d6fb-d708-464c-8617-9f36a9814ed5.roa
File: 2263d6fb-d708-464c-8617-9f36a9814ed5.roa (raw, json)
Hash identifier: ht/Qn8QhgKIRhLCMeKnM2zoJv5M38/q6c5cue0W/jC8=
Subject key identifier: E4:0A:3C:E7:EC:07:79:C6:E9:C9:56:2C:4E:13:3F:EA:4D:EB:35:FC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2542693F0DB0C04FED47EFEA2AA4BADB89E70499
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2263d6fb-d708-464c-8617-9f36a9814ed5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:42:69:3f:0d:b0:c0:4f:ed:47:ef:ea:2a:a4:ba:db:89:e7:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=4875ba2202f9809b6043d6023c7707ba136efa31f219d39db46b6cff22d43e12, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:77:59:78:26:d4:9e:36:7f:1e:e9:3b:8b:
a7:0b:01:d0:cc:0a:07:20:69:f3:21:e4:60:18:c2:
24:d6:87:64:ed:8d:3e:a9:9b:d9:e5:6d:b7:9c:81:
dd:d8:f9:9a:6f:1b:89:68:7b:19:92:88:5a:cf:15:
c6:66:cf:32:ed:5a:fd:ed:04:8e:1c:ec:4b:1e:bb:
5c:a6:29:27:13:e2:c5:b8:0b:cd:fa:33:c9:b4:fd:
df:2d:98:58:56:6a:de:2c:05:af:e6:e4:63:55:8d:
da:e5:bc:75:3b:34:f9:70:7a:cf:99:a1:81:bc:92:
62:ae:bf:3b:80:bb:1e:98:e3:d3:b2:8f:96:f8:c9:
34:eb:bf:8c:c6:30:28:bd:cc:c3:29:86:0e:ae:d1:
b1:7a:55:a1:15:5d:a4:ca:38:63:2b:9d:1f:6c:83:
0b:9d:ec:39:02:fe:73:a6:ac:44:44:6d:b6:a9:bf:
42:8b:47:23:8a:e8:29:b1:a6:85:79:3f:f7:b0:4f:
b9:70:6f:c0:60:31:b2:d2:27:5a:8b:55:5e:66:6c:
81:76:55:8e:6b:31:f8:90:3f:c7:d3:2d:43:b4:af:
d1:04:34:10:25:e1:40:84:c7:c6:55:59:65:50:43:
33:fe:6c:e8:c1:e5:c7:76:a6:d0:7d:4c:14:2e:af:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:3C:E7:EC:07:79:C6:E9:C9:56:2C:4E:13:3F:EA:4D:EB:35:FC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2263d6fb-d708-464c-8617-9f36a9814ed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
68:24:c7:75:91:30:d5:10:37:3f:af:0e:59:2b:01:18:45:5a:
f8:59:ec:4c:26:84:be:5d:d1:7e:eb:67:89:f4:44:b0:68:10:
6a:35:8b:19:ca:95:bc:a6:73:31:f9:36:8b:6d:06:7b:8f:1b:
69:0b:68:53:a6:e2:c7:1a:fd:e7:f5:ea:13:24:da:73:b8:13:
c9:da:31:78:b6:6a:f5:1d:86:74:46:b2:62:ca:72:8a:ab:94:
05:db:7e:09:3a:c3:dc:5e:61:79:1d:bb:6d:53:38:e0:65:0e:
1a:4e:ff:77:e4:38:03:6c:94:76:0e:6f:7b:00:dd:eb:a3:5c:
9a:28:ff:b4:b1:06:d2:64:c8:b1:cd:d5:7c:20:23:67:87:78:
e1:49:43:34:65:3f:27:83:26:a1:6a:ba:f7:94:18:4a:90:74:
7c:33:b2:1d:3a:2c:ea:66:f9:ea:d0:c2:7a:70:ef:54:cb:54:
12:ac:63:76:97:09:41:d3:91:5f:37:0a:6e:db:58:ef:59:1b:
77:16:8e:52:76:0f:cf:f4:fc:d7:57:0e:09:6f:62:08:5c:33:
fb:20:0c:dd:bb:4c:a3:bc:9b:bb:99:2d:77:77:08:70:33:39:
a7:30:01:39:04:d1:77:11:ec:13:0a:b4:c3:ad:95:9b:c9:32:
ab:f7:1a:30
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJUJpPw2wwE/tR+/qKqS624nnBJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4NzViYTIyMDJmOTgwOWI2MDQzZDYwMjNjNzcwN2JhMTM2ZWZhMzFmMjE5
ZDM5ZGI0NmI2Y2ZmMjJkNDNlMTIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKnMd1l4JtSeNn8e6TuLpwsB0MwKByBp8yHkYBjCJNaHZO2NPqmb2eVtt5yB
3dj5mm8biWh7GZKIWs8VxmbPMu1a/e0EjhzsSx67XKYpJxPixbgLzfozybT93y2Y
WFZq3iwFr+bkY1WN2uW8dTs0+XB6z5mhgbySYq6/O4C7Hpjj07KPlvjJNOu/jMYw
KL3MwymGDq7RsXpVoRVdpMo4YyudH2yDC53sOQL+c6asRERttqm/QotHI4roKbGm
hXk/97BPuXBvwGAxstInWotVXmZsgXZVjmsx+JA/x9MtQ7Sv0QQ0ECXhQITHxlVZ
ZVBDM/5s6MHlx3am0H1MFC6vVOECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTkCjzn
7Ad5xunJVixOEz/qTes1/DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjI2M2Q2ZmItZDcwOC00NjRjLTg2MTctOWYzNmE5ODE0ZWQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPEMA0G
CSqGSIb3DQEBCwUAA4IBAQBoJMd1kTDVEDc/rw5ZKwEYRVr4WexMJoS+XdF+62eJ
9ESwaBBqNYsZypW8pnMx+TaLbQZ7jxtpC2hTpuLHGv3n9eoTJNpzuBPJ2jF4tmr1
HYZ0RrJiynKKq5QF234JOsPcXmF5HbttUzjgZQ4aTv935DgDbJR2Dm97AN3ro1ya
KP+0sQbSZMixzdV8ICNnh3jhSUM0ZT8ngyaharr3lBhKkHR8M7IdOizqZvnq0MJ6
cO9Uy1QSrGN2lwlB05FfNwpu21jvWRt3Fo5Sdg/P9PzXVw4Jb2IIXDP7IAzdu0yj
vJu7mS13dwhwMzmnMAE5BNF3EewTCrTDrZWbyTKr9xow
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net