Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
File: 34e19faa-5cf1-4226-b61a-b6161eba0791.roa (raw, json)
Hash identifier: 0y3JkMLwcB7JeK786AhoNLsMZ1xycoLhOhaWu7pGjmI=
Subject key identifier: 63:06:45:BC:FF:CF:FE:4E:8F:9D:60:8A:DA:26:30:9F:63:27:DC:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 444B6082EAE1D1C35546EC5A911D0D2B05A563
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4b:60:82:ea:e1:d1:c3:55:46:ec:5a:91:1d:0d:2b:05:a5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=a02af04e655d3fc866265ac3d103929eaedacfec9d32d7fe47278418b7ea8dab, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:4e:98:db:a7:1d:3e:13:04:08:e4:1f:b8:
3e:b2:6c:78:99:4b:d2:dd:de:d7:ea:8b:0d:65:c4:
dc:c9:23:d8:a5:5f:c9:5d:9e:20:b0:28:5f:1a:eb:
49:7c:ca:e6:d7:46:c8:99:a9:d0:bc:5a:2c:83:63:
ef:7b:12:c6:2b:78:8a:16:79:45:31:50:8c:8d:31:
64:63:61:6e:1c:b1:99:ae:8f:4a:d2:c6:9c:e1:fe:
fe:49:da:16:be:65:0b:69:72:c8:1e:07:5c:69:dd:
85:8b:50:42:71:ce:0d:8f:6b:fe:ab:8b:7c:4f:17:
0f:23:42:c3:77:94:37:ac:0a:e8:93:c2:17:72:8e:
46:0b:34:97:58:a7:08:95:53:11:8a:55:26:f7:a7:
ac:bd:05:cb:c7:00:dd:dc:91:0d:92:46:e4:f0:f4:
aa:62:7b:51:a2:60:3b:ec:b3:b2:12:52:c4:5c:92:
40:01:16:97:5f:9e:ba:9b:09:c7:e1:28:0c:79:20:
9a:d6:11:57:7e:ab:c9:e0:f4:25:cd:73:ed:63:69:
65:44:b5:37:c2:8f:ce:88:41:60:0a:c2:e5:d5:e2:
79:89:59:ee:6d:1d:a3:b7:4c:de:0c:b9:99:6d:2d:
99:b7:56:ab:de:29:4b:81:80:41:4e:cd:ab:cb:2d:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:45:BC:FF:CF:FE:4E:8F:9D:60:8A:DA:26:30:9F:63:27:DC:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/34e19faa-5cf1-4226-b61a-b6161eba0791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:8d:2e:48:b9:57:46:29:0a:c0:91:21:70:b3:16:62:78:14:
01:33:c1:3c:98:0e:e6:9f:82:fb:5d:10:a6:e2:78:68:8a:2b:
1f:9f:76:b6:cc:02:dd:b5:85:25:ea:62:e3:72:1d:bb:8d:58:
1e:f7:ab:9b:26:e3:71:b1:f0:51:51:de:58:c6:f3:46:ad:b2:
d2:9d:d1:cb:34:df:77:25:35:5f:aa:28:f8:f6:66:9d:f1:bf:
e8:41:9d:05:99:95:f8:17:a9:c8:25:58:8c:bf:27:a0:7f:a2:
81:24:0f:bb:11:cb:45:af:f3:e0:ee:0e:8d:c5:b3:e7:fe:da:
ab:2c:05:6e:3f:6e:1c:5f:d8:ee:97:be:40:1c:37:90:47:9d:
c6:04:f1:5c:7e:76:f1:0a:a8:56:1e:64:fe:39:4d:7b:da:6d:
42:84:f6:2a:c9:db:5b:23:77:5f:7f:f7:6e:c8:8d:9d:aa:8c:
03:86:6d:05:69:a3:c5:9f:fe:f8:28:d3:50:46:ba:e6:09:91:
cb:6c:56:32:e2:bb:ea:cf:0a:66:a7:7f:90:7d:a8:fb:57:a7:
9e:c6:30:ac:fb:a4:2f:a5:dd:44:4b:7a:39:3d:1f:09:f6:81:
75:39:3f:2b:4f:0e:df:8b:92:d9:54:32:90:3b:ea:b8:a2:e6:
c2:72:6e:aa
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgITREtggurh0cNVRuxakR0NKwWlYzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0NTNmNDc0NjM1NGUyYWQxNWNlN2ViZDhkYzIxZjk2YzBl
NWM4N2NmMB4XDTI0MTIwNjAwMDAwMFoXDTI1MDExMDIzNTk1OVowejFJMEcGA1UE
BRNAYTAyYWYwNGU2NTVkM2ZjODY2MjY1YWMzZDEwMzkyOWVhZWRhY2ZlYzlkMzJk
N2ZlNDcyNzg0MThiN2VhOGRhYjEtMCsGA1UEAxMkYzMzNjQxMWEtNjY1MS00ZjEz
LThlZjktZGU2ODFjN2M5NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJROmNunHT4TBAjkH7g+smx4mUvS3d7X6osNZcTcySPYpV/JXZ4gsChfGutJ
fMrm10bImanQvFosg2PvexLGK3iKFnlFMVCMjTFkY2FuHLGZro9K0sac4f7+SdoW
vmULaXLIHgdcad2Fi1BCcc4Nj2v+q4t8TxcPI0LDd5Q3rArok8IXco5GCzSXWKcI
lVMRilUm96esvQXLxwDd3JENkkbk8PSqYntRomA77LOyElLEXJJAARaXX566mwnH
4SgMeSCa1hFXfqvJ4PQlzXPtY2llRLU3wo/OiEFgCsLl1eJ5iVnubR2jt0zeDLmZ
bS2Zt1ar3ilLgYBBTs2ryy2ZhQIDAQABo4ICIDCCAhwwHQYDVR0OBBYEFGMGRbz/
z/5Oj51gitomMJ9jJ9w4MB8GA1UdIwQYMBaAFEU/R0Y1TirRXOfr2Nwh+WwOXIfP
MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUlQ5SFJqVk9L
dEZjNS12WTNDSDViQTVjaDg4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsG
AQUFBzALhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5j
b20vdm9sdW1lLzk2N2EyNTVjLWQ2ODAtNDJkMy05ZWMzLWVjYjNmOWRhMDg4Yy8z
NGUxOWZhYS01Y2YxLTQyMjYtYjYxYS1iNjE2MWViYTA3OTEucm9hMIGIBgNVHR8E
gYAwfjB8oHqgeIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25h
d3MuY29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4
OGMvX2xBaTVUSERzUWRQWUE5bm1FVDZvbEh1VmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPuYwDQYJ
KoZIhvcNAQELBQADggEBAKKNLki5V0YpCsCRIXCzFmJ4FAEzwTyYDuafgvtdEKbi
eGiKKx+fdrbMAt21hSXqYuNyHbuNWB73q5sm43Gx8FFR3ljG80atstKd0cs033cl
NV+qKPj2Zp3xv+hBnQWZlfgXqcglWIy/J6B/ooEkD7sRy0Wv8+DuDo3Fs+f+2qss
BW4/bhxf2O6XvkAcN5BHncYE8Vx+dvEKqFYeZP45TXvabUKE9irJ21sjd19/927I
jZ2qjAOGbQVpo8Wf/vgo01BGuuYJkctsVjLiu+rPCmanf5B9qPtXp57GMKz7pC+l
3URLejk9Hwn2gXU5PytPDt+LktlUMpA76rii5sJybqo=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net