Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/297efebe-504f-4d63-8877-e5b94842e462.roa
File: 297efebe-504f-4d63-8877-e5b94842e462.roa (raw, json)
Hash identifier: mRqiay3RrmPo1Nf5Lav971YoY7YrvBHUxyyFvW7k7UY=
Subject key identifier: 7E:24:EE:5F:C3:52:56:E2:01:A4:EF:FF:36:80:FE:F1:80:9D:CA:96
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0CA5F25030BEDCCEA22F93457D315CF44E6A35C0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/297efebe-504f-4d63-8877-e5b94842e462.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a5:f2:50:30:be:dc:ce:a2:2f:93:45:7d:31:5c:f4:4e:6a:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=cd1e4bf0b02a304d183a2a62f3ae87f0e65b12196f689a3d472241ffb7c5b3bd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:ff:d2:7a:16:b2:35:8b:8b:00:1c:c9:8a:
e0:f4:2b:f4:97:ed:f9:72:42:86:8d:4d:3a:86:6f:
11:82:8a:f6:67:9b:44:e5:65:ed:94:5c:8f:51:45:
15:88:6f:19:c0:94:53:25:be:fe:af:ce:50:4d:0e:
9d:d9:e2:fc:1e:95:41:af:95:86:cc:37:22:b3:cd:
b9:33:ca:e0:94:e3:21:59:f6:ac:64:5d:45:f3:af:
8c:46:f9:4a:4d:63:e6:d2:6d:ac:d1:fb:e7:01:97:
fe:af:dc:40:90:e5:1d:63:6c:c2:22:49:38:a5:90:
cc:19:b8:41:c0:e4:19:4c:ba:58:94:85:6f:8f:69:
ff:38:b2:07:25:6c:5b:b4:20:95:5d:ec:08:d7:6a:
6e:1c:a8:5d:38:88:e6:c7:38:67:1b:3a:83:8d:3c:
f0:da:5d:03:16:fd:fc:e1:ae:ce:84:63:9c:66:31:
fa:d7:b1:c1:86:02:f5:be:01:1d:cf:6f:03:f8:6c:
e1:d8:79:21:f8:cf:69:b6:f4:f5:c6:3b:f3:53:25:
94:0a:f8:62:7d:2a:77:d4:bc:de:6b:bf:f3:0a:9c:
88:06:a5:ca:46:e1:35:76:ac:21:54:f5:19:36:e1:
a4:91:8e:55:59:14:a1:74:d7:4c:50:07:e3:52:7f:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:EE:5F:C3:52:56:E2:01:A4:EF:FF:36:80:FE:F1:80:9D:CA:96
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/297efebe-504f-4d63-8877-e5b94842e462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
82:54:85:6d:0c:14:87:90:ee:8e:fc:8e:37:d0:18:0d:d5:a7:
34:43:b5:08:99:41:ec:f1:62:2f:fe:8e:d0:e3:d5:51:0f:0e:
a7:5b:98:59:22:35:c6:59:f4:0a:10:3f:12:ed:64:40:f2:d5:
89:e2:b3:3a:91:dd:ad:eb:af:8e:75:55:fd:d4:78:8b:18:79:
81:d5:74:62:f6:77:88:be:33:4b:67:37:2c:13:f6:ec:30:53:
5c:0b:5b:51:a0:49:ad:67:89:a0:9c:5d:a4:c4:da:46:a8:f8:
f7:2a:d0:ef:53:4e:82:98:ff:ce:dc:77:4f:e0:08:e2:c0:1f:
51:5a:ab:77:43:21:dd:10:8d:74:7f:11:b2:7f:f6:51:b6:1d:
93:da:a0:0f:51:f1:fe:79:d9:0e:91:f7:92:f3:1e:aa:d2:ca:
e8:71:37:ca:e4:ad:f2:39:00:0e:ab:d5:5a:e8:71:7a:dd:a1:
10:e6:9a:34:f4:bc:6d:89:21:de:12:da:47:41:dd:a4:86:ae:
f4:c8:67:8b:ba:59:29:aa:8d:83:19:e3:a3:f7:f8:80:c5:cd:
1c:d1:21:0a:f1:0b:64:79:f7:83:d6:c3:e1:d8:38:d0:d9:0f:
36:bd:a4:0a:7e:f3:9b:db:af:4c:b5:4f:ec:fc:4a:38:fc:34:
43:6f:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net