Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/27a797e0-d86a-4e56-8092-d84689502090.roa
File: 27a797e0-d86a-4e56-8092-d84689502090.roa (raw, json)
Hash identifier: 6bFghw0tJWivRt2eOW8Ovzvxl/yR1D7fbQqhXpDn3Mg=
Subject key identifier: FB:05:E2:7B:F1:17:B0:7B:6D:DD:F4:A9:37:5B:01:DF:B2:85:0B:A8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7F806E966472828E2BBA79F0726CE8E44931FB47
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/27a797e0-d86a-4e56-8092-d84689502090.roa
Signing time: Tue 12 Nov 2024 00:00:00 +0000
ROA not before: Tue 12 Nov 2024 00:00:00 +0000
ROA not after: Tue 17 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:80:6e:96:64:72:82:8e:2b:ba:79:f0:72:6c:e8:e4:49:31:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 12 00:00:00 2024 GMT
Not After : Dec 17 23:59:59 2024 GMT
Subject: serialNumber=c72a72ee7e102cac4a815745b51b191e2f7c5b6d16e177c2b6e4c473015f2c61, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:93:ae:d5:eb:fd:21:a5:c9:cc:6d:e6:18:
9f:31:0d:9e:05:0a:b2:51:49:68:67:05:cf:52:94:
31:6d:92:b5:d5:1d:89:01:df:3b:6f:e1:86:52:ea:
42:ac:0d:5d:ce:94:c7:ef:2e:57:43:1e:8b:7b:74:
ba:f2:d2:eb:63:d1:4d:5a:f2:0d:56:da:87:16:cc:
da:30:33:5b:7c:ad:62:f4:43:4c:1d:00:36:ae:7e:
19:98:36:50:ea:57:e3:3e:49:36:77:65:17:86:cf:
9b:dc:9b:73:33:6c:57:4d:de:fc:5c:8f:af:67:15:
eb:24:4c:a6:2e:d2:00:1a:85:26:5b:cf:8d:32:20:
20:29:89:03:d3:56:85:66:5b:a0:64:af:2d:57:b9:
0b:bc:f2:3b:dc:54:3f:1d:98:92:96:c2:5a:2b:f9:
75:ff:59:52:23:a0:37:6b:03:71:ff:87:0b:79:4a:
55:b8:29:81:2e:3d:a7:36:8b:14:09:48:77:97:d5:
c5:5e:0d:ed:7a:b5:1a:37:5a:6a:5b:f6:1d:7e:ea:
12:3e:60:7d:d5:92:71:11:d7:23:52:15:98:83:b4:
6f:e8:70:84:84:b3:31:a6:72:dd:a5:76:a4:e3:9b:
8b:25:30:64:91:66:07:64:37:e5:2c:c9:aa:2a:82:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:E2:7B:F1:17:B0:7B:6D:DD:F4:A9:37:5B:01:DF:B2:85:0B:A8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/27a797e0-d86a-4e56-8092-d84689502090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c2:36:cd:3b:3a:a2:7d:43:26:be:66:cc:a7:50:9e:fe:0b:8b:
87:a1:4f:59:0e:91:8f:6f:e9:db:53:ff:e7:eb:b7:bf:ad:a9:
a3:ef:d8:51:91:9e:77:05:39:ff:21:d4:a1:14:ff:8b:57:56:
a8:00:37:ea:e6:ae:63:90:a0:d0:7f:22:17:6e:82:6a:fb:7f:
92:33:d0:a7:73:cc:8e:b1:bf:9c:5a:be:70:c1:9d:29:e9:d0:
8d:1a:56:92:58:36:5e:b7:8c:8a:36:31:fb:6b:49:d8:b3:a5:
5f:00:a3:c9:45:c8:c0:a9:e9:6a:97:19:63:39:de:b0:2f:f1:
29:86:45:5a:05:fa:c7:0f:70:24:b2:ff:44:d3:2e:75:c3:11:
3c:92:d4:ab:3e:61:c1:02:46:73:7c:14:09:89:f3:c0:5a:79:
e0:b5:60:67:55:e8:69:f8:26:13:70:01:47:20:8e:3a:1f:f6:
cf:17:8a:91:4d:9b:9f:05:a3:84:57:1e:79:db:fd:1f:ac:bd:
7b:dd:22:d3:fb:2e:aa:cc:db:89:93:26:c0:42:be:05:60:bb:
45:40:1e:35:f7:9f:c2:43:4f:71:d8:8e:37:93:c7:27:cf:78:
e9:4b:cb:d5:7e:93:68:81:56:3f:c9:e6:08:85:a7:d8:b4:13:
d7:1f:d3:28
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUf4BulmRygo4runnwcmzo5Ekx+0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTIwMDAwMDBaFw0yNDEyMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGM3MmE3MmVlN2UxMDJjYWM0YTgxNTc0NWI1MWIxOTFlMmY3YzViNmQxNmUx
NzdjMmI2ZTRjNDczMDE1ZjJjNjExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIrEk67V6/0hpcnMbeYYnzENngUKslFJaGcFz1KUMW2StdUdiQHfO2/hhlLq
QqwNXc6Ux+8uV0Mei3t0uvLS62PRTVryDVbahxbM2jAzW3ytYvRDTB0ANq5+GZg2
UOpX4z5JNndlF4bPm9ybczNsV03e/FyPr2cV6yRMpi7SABqFJlvPjTIgICmJA9NW
hWZboGSvLVe5C7zyO9xUPx2YkpbCWiv5df9ZUiOgN2sDcf+HC3lKVbgpgS49pzaL
FAlId5fVxV4N7Xq1Gjdaalv2HX7qEj5gfdWScRHXI1IVmIO0b+hwhISzMaZy3aV2
pOObiyUwZJFmB2Q35SzJqiqCeVMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT7BeJ7
8Rewe23d9Kk3WwHfsoULqDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjdhNzk3ZTAtZDg2YS00ZTU2LTgwOTItZDg0Njg5NTAyMDkwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAzMYMA0G
CSqGSIb3DQEBCwUAA4IBAQDCNs07OqJ9Qya+ZsynUJ7+C4uHoU9ZDpGPb+nbU//n
67e/ramj79hRkZ53BTn/IdShFP+LV1aoADfq5q5jkKDQfyIXboJq+3+SM9Cnc8yO
sb+cWr5wwZ0p6dCNGlaSWDZet4yKNjH7a0nYs6VfAKPJRcjAqelqlxljOd6wL/Ep
hkVaBfrHD3Aksv9E0y51wxE8ktSrPmHBAkZzfBQJifPAWnngtWBnVehp+CYTcAFH
II46H/bPF4qRTZufBaOEVx552/0frL173SLT+y6qzNuJkybAQr4FYLtFQB4195/C
Q09x2I43k8cnz3jpS8vVfpNogVY/yeYIhafYtBPXH9Mo
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net