Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
File: 3071c2a4-bba6-4def-894d-a0bf6a718d91.roa (raw, json)
Hash identifier: iWjNFIAV7MNFgbJHDyx5XVkG4IJMYwtJeu9jGJc6Efk=
Subject key identifier: 27:26:2B:F9:C4:AC:A3:88:DD:4E:F0:BC:CA:04:8E:03:DE:EB:A6:51
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 195568B664605BD488E3D613DCADD4B49FC96D59
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:55:68:b6:64:60:5b:d4:88:e3:d6:13:dc:ad:d4:b4:9f:c9:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=785ca9d47bf6b9e5cd20c10683862a170d41c8a02ac20e9a36a200a22eaa2bb4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:b8:6a:d2:b7:ec:f5:90:4e:38:37:23:2b:
b5:30:20:f3:c9:4f:7e:ba:b6:98:6f:b2:b3:99:3d:
61:0f:58:2f:bc:65:01:c2:b6:e6:18:dc:b2:22:7b:
bb:39:6e:10:73:f8:5a:9c:24:87:f2:90:9c:ef:ff:
c9:0f:67:8b:ea:47:19:5b:ed:b8:aa:76:a8:f2:a0:
c1:78:cf:e5:07:b2:85:e6:69:90:6d:13:f8:2f:12:
2e:27:de:3b:da:d1:95:7f:fa:5f:6c:47:b2:51:68:
d3:0c:60:98:83:e2:8d:9a:f8:97:55:77:bc:3f:99:
fb:09:cd:ab:c5:88:b7:9c:35:af:9f:8f:03:dc:3d:
94:49:3d:6c:0e:fc:b7:6f:45:82:8b:e0:3e:07:69:
24:9f:9c:60:f5:41:c3:04:d6:21:c0:ba:5f:66:ce:
f8:e6:40:29:20:b7:88:3a:67:e7:48:12:1b:84:89:
e3:59:4b:1d:63:57:9e:8d:78:72:dc:b3:3b:7c:00:
94:0b:3e:21:e7:24:36:01:e1:f6:69:d3:47:c1:ef:
96:a5:9e:5c:18:51:81:49:8b:1d:70:f1:c4:46:99:
d2:a4:c7:25:29:d3:d2:26:ca:81:3c:fc:50:07:0e:
71:f3:7f:b4:77:08:d3:61:c4:20:6c:fd:15:cc:48:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:26:2B:F9:C4:AC:A3:88:DD:4E:F0:BC:CA:04:8E:03:DE:EB:A6:51
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:1b:82:af:7e:57:53:25:28:62:7c:00:69:1e:44:f8:4e:7a:
f7:59:d0:99:77:1e:5b:af:69:e6:90:77:76:56:48:e7:bb:9c:
ca:91:39:a4:e4:ed:0d:b2:6b:0e:dc:8f:30:16:90:33:80:1b:
d9:68:b2:72:57:c9:21:c7:7d:1c:dd:70:84:db:eb:84:33:60:
a1:5c:0e:6d:05:e4:60:d6:5a:91:7a:aa:ac:d1:08:b7:21:7b:
d9:cd:12:4b:f6:54:70:63:cd:17:35:4a:96:4e:28:70:27:fc:
5f:73:0d:91:d2:af:fd:65:de:fc:97:4b:7c:43:74:e1:f6:26:
39:1a:f3:8e:23:0b:97:b2:ed:10:8b:5a:b2:ac:ab:01:17:e1:
96:ad:70:60:b1:4b:38:20:4c:01:01:ec:04:c9:fc:c6:7a:a4:
88:af:37:c4:96:d0:6d:2b:7a:9a:11:99:84:6b:e9:92:bb:d7:
28:5e:aa:78:10:bc:eb:2c:08:d0:8c:d9:ce:49:0c:d6:f3:ad:
7b:d4:f0:4d:e9:f9:13:91:0c:ea:35:0a:a2:76:af:1e:a4:e1:
c9:df:7b:d7:4c:6c:dc:67:8a:95:a7:4e:87:32:77:2f:45:40:
01:42:9a:1d:d2:17:e9:fb:dc:60:75:1b:82:35:e2:bc:0a:5e:
c3:52:f3:11
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUGVVotmRgW9SI49YT3K3UtJ/JbVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDMwMDAwMDBaFw0yNTAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDc4NWNhOWQ0N2JmNmI5ZTVjZDIwYzEwNjgzODYyYTE3MGQ0MWM4YTAyYWMy
MGU5YTM2YTIwMGEyMmVhYTJiYjQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANOduGrSt+z1kE44NyMrtTAg88lPfrq2mG+ys5k9YQ9YL7xlAcK25hjcsiJ7
uzluEHP4Wpwkh/KQnO//yQ9ni+pHGVvtuKp2qPKgwXjP5QeyheZpkG0T+C8SLife
O9rRlX/6X2xHslFo0wxgmIPijZr4l1V3vD+Z+wnNq8WIt5w1r5+PA9w9lEk9bA78
t29FgovgPgdpJJ+cYPVBwwTWIcC6X2bO+OZAKSC3iDpn50gSG4SJ41lLHWNXno14
ctyzO3wAlAs+IeckNgHh9mnTR8HvlqWeXBhRgUmLHXDxxEaZ0qTHJSnT0ibKgTz8
UAcOcfN/tHcI02HEIGz9FcxIjmkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQnJiv5
xKyjiN1O8LzKBI4D3uumUTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzA3MWMyYTQtYmJhNi00ZGVmLTg5NGQtYTBiZjZhNzE4ZDkxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNsMA0G
CSqGSIb3DQEBCwUAA4IBAQABG4KvfldTJShifABpHkT4Tnr3WdCZdx5br2nmkHd2
Vkjnu5zKkTmk5O0NsmsO3I8wFpAzgBvZaLJyV8khx30c3XCE2+uEM2ChXA5tBeRg
1lqReqqs0Qi3IXvZzRJL9lRwY80XNUqWTihwJ/xfcw2R0q/9Zd78l0t8Q3Th9iY5
GvOOIwuXsu0Qi1qyrKsBF+GWrXBgsUs4IEwBAewEyfzGeqSIrzfEltBtK3qaEZmE
a+mSu9coXqp4ELzrLAjQjNnOSQzW86171PBN6fkTkQzqNQqidq8epOHJ33vXTGzc
Z4qVp06HMncvRUABQpod0hfp+9xgdRuCNeK8Cl7DUvMR
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net