Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
File: 2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa (raw, json)
Hash identifier: /yd/FNZhEXgXw53bYRdM940t3QX6w7cDYkNK1zrbYpQ=
Subject key identifier: 57:E2:63:18:12:61:53:0E:DA:E5:E5:81:EB:B2:4E:64:D5:BE:A4:F1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 141E74DA2F7FDD5F111DB298CB0BF47B94665F41
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1e:74:da:2f:7f:dd:5f:11:1d:b2:98:cb:0b:f4:7b:94:66:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=e7bfd45e9b82ebc4bd31f745c8865dd7ef4690915d3a1370d6c790b12fa4637d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:cb:18:6f:aa:7e:b5:36:34:cd:ac:ee:ad:
f9:ea:a6:4c:a8:20:38:e8:9c:9c:10:b2:f7:5e:23:
15:74:71:97:50:06:10:54:fe:d3:56:cd:ae:d8:6a:
2b:41:43:ff:da:3e:5c:79:7e:36:89:7f:3a:62:d2:
f5:9d:45:1f:c1:2c:9c:86:94:1e:97:3c:70:b5:c6:
6b:06:68:05:dd:ae:b1:5a:68:7b:5b:5e:4c:e9:d9:
62:fe:f9:ac:a7:73:8e:f9:59:fd:13:7b:3a:82:d1:
9e:0c:fe:b5:14:54:53:69:57:f4:0c:00:9e:6b:0a:
dc:28:32:47:03:d1:49:34:ef:79:2d:20:39:fb:d9:
d0:ec:20:8e:6c:aa:16:32:4c:1e:61:2e:9b:4e:e4:
96:37:72:af:91:3e:47:72:03:00:8e:40:31:79:cc:
e9:f1:7a:fb:ad:7a:81:f3:47:a3:2e:ce:79:55:44:
25:08:5b:24:59:fc:5c:eb:41:fc:db:4b:87:eb:28:
6b:96:9e:f3:96:a9:03:d1:fb:f1:85:7a:30:67:97:
75:e9:21:2c:d4:2e:ea:f6:3b:2f:95:10:3e:75:b5:
e1:bb:17:d3:f8:97:b5:aa:f0:80:1e:91:a5:f6:90:
60:0d:b8:36:33:a8:37:75:72:0f:9f:e7:80:3c:8f:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:63:18:12:61:53:0E:DA:E5:E5:81:EB:B2:4E:64:D5:BE:A4:F1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ffd20e2-a16d-44a6-a059-e9f3fcb812cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
59:38:6f:dc:bc:d7:ac:6b:4c:26:52:7d:68:1c:3b:46:9e:74:
7f:5c:45:ce:be:14:44:0a:e2:5f:be:3b:95:47:db:39:91:bc:
61:28:d9:44:01:d4:eb:5c:1b:4c:7a:de:67:f5:b2:d9:a6:0e:
e7:72:3a:0e:6c:6c:de:da:d6:26:e6:bc:5a:9c:02:af:46:a9:
bd:7b:f6:e7:96:6f:59:fc:0f:0c:8b:bf:59:6f:54:58:d0:54:
9f:8d:e5:65:64:6b:ad:6b:b0:7e:5b:6e:b7:48:ca:9d:5c:13:
aa:c2:81:1b:37:27:b6:a5:bd:a7:21:67:3d:33:1c:40:af:9f:
3c:50:3a:47:bf:44:aa:2c:c0:8c:60:dc:40:f3:d1:7d:bc:e1:
c6:5f:6b:26:53:8a:0e:24:86:50:fb:40:93:3d:28:f1:f1:3f:
62:ae:40:cb:e3:b6:8f:4e:5f:77:1b:8b:da:2e:d5:1b:9b:2f:
aa:c1:ff:b1:31:a9:e1:ca:56:94:53:1c:8e:08:f5:3d:8f:2b:
9a:96:88:3d:e8:56:5e:47:2b:99:6d:3c:15:82:0e:cf:02:62:
3b:31:4c:7e:0a:33:86:9b:b3:f3:a2:06:30:a5:62:49:7d:b0:
b1:c7:b9:e1:22:97:b8:d9:d6:52:2b:d8:82:de:23:ee:f6:e1:
2f:0a:47:dd
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFB502i9/3V8RHbKYywv0e5RmX0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGU3YmZkNDVlOWI4MmViYzRiZDMxZjc0NWM4ODY1ZGQ3ZWY0NjkwOTE1ZDNh
MTM3MGQ2Yzc5MGIxMmZhNDYzN2QxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVtyxhvqn61NjTNrO6t+eqmTKggOOicnBCy914jFXRxl1AGEFT+01bNrthq
K0FD/9o+XHl+Nol/OmLS9Z1FH8EsnIaUHpc8cLXGawZoBd2usVpoe1teTOnZYv75
rKdzjvlZ/RN7OoLRngz+tRRUU2lX9AwAnmsK3CgyRwPRSTTveS0gOfvZ0Owgjmyq
FjJMHmEum07kljdyr5E+R3IDAI5AMXnM6fF6+616gfNHoy7OeVVEJQhbJFn8XOtB
/NtLh+soa5ae85apA9H78YV6MGeXdekhLNQu6vY7L5UQPnW14bsX0/iXtarwgB6R
pfaQYA24NjOoN3VyD5/ngDyP0MMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRX4mMY
EmFTDtrl5YHrsk5k1b6k8TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MmZmZDIwZTItYTE2ZC00NGE2LWEwNTktZTlmM2ZjYjgxMmNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN
BgkqhkiG9w0BAQsFAAOCAQEAWThv3LzXrGtMJlJ9aBw7Rp50f1xFzr4URAriX747
lUfbOZG8YSjZRAHU61wbTHreZ/Wy2aYO53I6Dmxs3trWJua8WpwCr0apvXv255Zv
WfwPDIu/WW9UWNBUn43lZWRrrWuwfltut0jKnVwTqsKBGzcntqW9pyFnPTMcQK+f
PFA6R79EqizAjGDcQPPRfbzhxl9rJlOKDiSGUPtAkz0o8fE/Yq5Ay+O2j05fdxuL
2i7VG5svqsH/sTGp4cpWlFMcjgj1PY8rmpaIPehWXkcrmW08FYIOzwJiOzFMfgoz
hpuz86IGMKViSX2wsce54SKXuNnWUivYgt4j7vbhLwpH3Q==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net