Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e1370a6-8da4-4b46-a9e0-f0f6dc87d9fc.roa
File: 2e1370a6-8da4-4b46-a9e0-f0f6dc87d9fc.roa (raw, json)
Hash identifier: LoOClimDmar2jd2gNeMpKAZQyuiW5B/gzoFQt9lkAds=
Subject key identifier: 8A:A8:10:44:F4:C1:A7:8A:2F:F2:C7:D4:6E:5F:FC:4B:5F:F4:76:77
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1F026358928CA0C6EAD0F7D2D87DEB63CA68BD72
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e1370a6-8da4-4b46-a9e0-f0f6dc87d9fc.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:02:63:58:92:8c:a0:c6:ea:d0:f7:d2:d8:7d:eb:63:ca:68:bd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=fbab29cfffcf24b3342437c34162b2f19bcf6ead90d82898e306fcc0faaa7e1f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:93:6d:d1:7f:78:65:88:42:c3:27:8c:0d:
41:d1:db:71:d8:03:c3:cb:9c:28:9b:9f:03:de:70:
99:84:d2:63:31:37:4b:5c:56:a2:3d:cb:96:30:32:
c9:6f:67:cc:a8:2a:34:26:54:8f:d5:82:23:67:bf:
5d:be:1a:b0:69:c7:98:35:79:f2:43:2e:ac:77:74:
e6:43:a5:f9:46:8c:ac:61:5a:69:97:dc:df:d8:89:
17:3e:52:bd:6d:15:3f:d3:59:93:86:d0:71:8b:79:
ae:63:13:38:ed:a3:1e:26:b7:e7:59:11:75:8f:30:
ff:d2:b2:d7:b3:51:cc:e8:28:15:db:1e:91:d4:15:
e2:18:b3:53:65:02:12:ed:37:4f:3d:6e:15:4c:f2:
ee:d4:99:f7:b8:ff:14:e9:16:a0:6c:b1:7f:a1:70:
1a:46:5a:dc:c7:0e:85:37:f6:1d:30:2d:55:48:23:
54:8a:14:97:06:3a:42:1e:3d:58:fb:e4:08:43:6c:
54:1c:4c:4e:b3:77:21:9e:45:29:bd:4a:fa:c1:e8:
67:83:6d:dd:2c:fa:a0:a3:79:dc:c0:c9:4e:c5:34:
e3:76:d6:0e:12:b4:a4:21:2e:69:9f:85:8c:7a:55:
db:6b:91:ad:84:43:33:da:d0:f9:91:be:df:7f:fb:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:10:44:F4:C1:A7:8A:2F:F2:C7:D4:6E:5F:FC:4B:5F:F4:76:77
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e1370a6-8da4-4b46-a9e0-f0f6dc87d9fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:70:21:6a:9e:1f:db:63:c0:a2:0c:4c:a0:0b:d5:70:aa:36:
73:4d:59:da:23:f3:82:db:49:24:54:12:ba:1c:77:a1:b6:2c:
d1:d0:9f:7b:64:13:13:10:63:23:a1:d9:ab:1e:69:c6:e0:13:
27:d5:7e:9f:9d:ae:24:76:c9:bd:98:c7:98:79:7e:f7:42:2e:
cf:a6:75:53:53:3c:3e:e1:3f:10:44:7a:5e:aa:77:f2:52:94:
a5:73:6f:5d:15:9b:dc:84:ed:3f:ac:ec:1c:f6:59:e6:cb:0c:
fb:86:8c:6b:c1:97:1b:c8:33:e3:c9:6d:28:ae:80:a1:6b:9c:
b3:70:2f:1e:3d:14:8f:28:ef:c3:f6:46:21:02:67:e6:bb:17:
10:30:d7:13:3a:3d:9c:4d:d9:cf:e1:b8:fd:26:bb:9d:85:a3:
a4:4d:cd:a5:35:78:e6:6f:78:db:f3:73:a1:26:fa:66:61:56:
a6:12:e3:ab:b7:c9:89:35:87:ab:46:22:82:e7:a7:48:ca:ab:
a5:e5:b3:e6:1e:49:87:3d:d8:f0:21:22:85:7b:bf:24:80:9e:
0b:f7:35:fa:3a:9a:1c:92:f4:bd:ca:b7:e4:87:5d:c0:51:95:
f9:6b:43:09:34:e5:a6:65:3d:d8:e1:be:7b:f2:d9:2d:d5:0f:
40:b8:79:36
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUHwJjWJKMoMbq0PfS2H3rY8povXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDYwMDAwMDBaFw0yNTAxMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGZiYWIyOWNmZmZjZjI0YjMzNDI0MzdjMzQxNjJiMmYxOWJjZjZlYWQ5MGQ4
Mjg5OGUzMDZmY2MwZmFhYTdlMWYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALQFk23Rf3hliELDJ4wNQdHbcdgDw8ucKJufA95wmYTSYzE3S1xWoj3LljAy
yW9nzKgqNCZUj9WCI2e/Xb4asGnHmDV58kMurHd05kOl+UaMrGFaaZfc39iJFz5S
vW0VP9NZk4bQcYt5rmMTOO2jHia351kRdY8w/9Ky17NRzOgoFdsekdQV4hizU2UC
Eu03Tz1uFUzy7tSZ97j/FOkWoGyxf6FwGkZa3McOhTf2HTAtVUgjVIoUlwY6Qh49
WPvkCENsVBxMTrN3IZ5FKb1K+sHoZ4Nt3Sz6oKN53MDJTsU043bWDhK0pCEuaZ+F
jHpV22uRrYRDM9rQ+ZG+33/7TsMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSKqBBE
9MGnii/yx9RuX/xLX/R2dzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MmUxMzcwYTYtOGRhNC00YjQ2LWE5ZTAtZjBmNmRjODdkOWZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIIYMA0G
CSqGSIb3DQEBCwUAA4IBAQA1cCFqnh/bY8CiDEygC9VwqjZzTVnaI/OC20kkVBK6
HHehtizR0J97ZBMTEGMjodmrHmnG4BMn1X6fna4kdsm9mMeYeX73Qi7PpnVTUzw+
4T8QRHpeqnfyUpSlc29dFZvchO0/rOwc9lnmywz7hoxrwZcbyDPjyW0oroCha5yz
cC8ePRSPKO/D9kYhAmfmuxcQMNcTOj2cTdnP4bj9JrudhaOkTc2lNXjmb3jb83Oh
JvpmYVamEuOrt8mJNYerRiKC56dIyqul5bPmHkmHPdjwISKFe78kgJ4L9zX6Opoc
kvS9yrfkh13AUZX5a0MJNOWmZT3Y4b578tkt1Q9AuHk2
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net