Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
File: 3113975a-2f82-4201-a061-176481f88265.roa (raw, json)
Hash identifier: WMNa9j/eFP7USqUcqXgFLr3pdKhVLr9hcMJdkQ5JtXM=
Subject key identifier: 53:7D:F4:7E:04:64:B8:8C:6D:89:D0:6E:38:4E:22:CB:9F:B9:B0:BB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E78DEFE277F0F15A421920054A8EDCDE4245D13
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:78:de:fe:27:7f:0f:15:a4:21:92:00:54:a8:ed:cd:e4:24:5d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=254e3f75c647d7da09ec10da27f46fa9b9294bc55e8cb7380f74b1c737723ccd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:54:aa:ac:0f:83:d5:5a:26:69:7a:89:a6:
da:97:aa:6d:6d:48:56:a4:f8:f7:94:4e:c1:70:6e:
f0:4d:5e:1b:2b:85:95:ff:a4:f0:d4:e3:d5:be:21:
6f:e9:e9:9c:09:76:24:0b:77:7c:91:aa:90:82:74:
84:5f:2d:37:60:47:1b:c6:a0:c2:cb:c8:ca:b3:4c:
d6:18:a8:21:c4:7b:6a:b1:4f:c8:c9:c2:d0:db:eb:
fd:01:4f:49:ae:df:d3:51:20:e2:10:1e:aa:0c:c5:
1d:bf:57:bf:87:ec:bb:15:d1:1b:8a:51:3f:af:c4:
c8:5b:02:d6:bf:8b:1e:ae:a9:83:3a:64:30:8e:83:
cf:88:1d:4a:1b:df:a7:1a:d1:f3:2e:cb:25:11:dc:
91:5b:d3:00:45:3a:a3:3c:68:87:75:9c:2f:5a:d8:
2a:46:e7:ba:6f:76:9f:9f:d0:d1:19:dd:a2:05:75:
d6:3e:2a:85:51:47:0a:a2:07:b7:09:8f:b4:cf:14:
2f:d2:f1:1f:c0:6f:59:93:ef:9a:f1:4f:04:9c:ec:
7b:af:9c:6d:eb:4c:f9:32:84:80:36:a4:3d:32:2b:
87:48:4e:b1:55:f6:53:15:00:f6:ba:51:bf:fe:19:
a3:58:0e:c7:14:ea:77:52:22:fa:b5:f3:81:18:c1:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:F4:7E:04:64:B8:8C:6D:89:D0:6E:38:4E:22:CB:9F:B9:B0:BB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3113975a-2f82-4201-a061-176481f88265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
41:ca:d6:85:2e:3e:cd:b8:86:ea:e9:7e:26:36:6c:2c:f5:00:
6c:8a:2e:03:19:a6:84:64:32:c1:81:9e:7b:bd:76:a9:7d:cb:
5b:0d:f3:9c:28:ac:65:7c:49:7b:19:53:30:02:ce:6e:5a:a4:
50:53:7f:11:11:83:92:65:89:47:8d:5e:f7:30:c9:9f:7e:2f:
c4:6c:f6:fc:f8:5c:28:39:39:18:2d:14:c5:fe:54:be:0c:47:
0b:77:f2:b7:2b:e8:30:ff:d4:4a:d3:ba:a1:1a:ab:fb:e8:c7:
4f:2e:32:da:e6:1d:e4:28:d0:6f:8c:a2:2e:07:73:af:d2:65:
93:38:88:76:36:7a:54:0e:1e:51:02:3e:5c:4d:d3:10:43:0c:
8d:7d:15:77:37:a6:a7:5f:7f:ba:62:c3:f2:16:3b:bf:6f:d9:
1e:2d:91:d0:77:c9:5a:e3:b3:ba:fe:b8:58:d9:97:26:27:c5:
1c:43:92:be:52:36:c8:a4:91:11:3c:d0:52:a8:02:b0:d2:18:
03:25:e2:05:36:f2:cc:49:8e:08:14:bf:fc:ce:01:38:b7:fd:
4e:eb:88:c1:ad:67:d1:7d:d2:cf:38:71:c1:46:47:dc:5b:3c:
7b:28:3d:df:68:5f:7f:c3:41:23:a5:28:88:da:07:37:3d:00:
c3:64:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net