Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/356dd5ec-7559-45e8-81d0-9e45590b5ae5.roa
File: 356dd5ec-7559-45e8-81d0-9e45590b5ae5.roa (raw, json)
Hash identifier: Pbv8IQvrtyL9iD+0yPlnY14Uo9GqMJRhr9Q2vNISKvs=
Subject key identifier: 94:DD:17:77:EF:6F:1F:2E:49:15:0B:F6:D0:48:45:8C:8F:A1:1E:40
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F09D87651ACA1E25B3FCBDC40D8E0C275FA18A8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/356dd5ec-7559-45e8-81d0-9e45590b5ae5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:09:d8:76:51:ac:a1:e2:5b:3f:cb:dc:40:d8:e0:c2:75:fa:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=f0e0fb4dd8691cebc88048042e5f744a4ff73120d22c2ce959ac0be35a593f8a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:b6:e0:51:c1:39:27:ec:f5:73:c0:b0:25:
f7:b7:c4:bf:20:69:f3:01:38:a4:7f:d9:96:f1:f5:
b7:12:da:42:30:67:a9:cd:8e:0e:70:63:84:cc:3f:
a4:21:00:70:d1:55:e3:a1:98:3f:f6:c9:bd:d8:c2:
8e:df:20:6c:5e:d1:71:05:bf:72:57:a1:38:41:34:
7d:d0:f0:3e:a8:a6:9d:97:ca:6e:48:d6:4e:d1:e7:
37:01:51:2e:9f:39:0f:ae:76:49:5e:38:c2:a9:b0:
36:2f:77:3f:3e:2d:66:3d:b1:ed:0f:9e:56:f3:00:
78:91:0b:e3:32:92:84:6b:f5:fd:71:3c:72:bb:c9:
c6:4c:62:7a:0a:39:9a:4e:e0:3a:39:88:e0:1b:cd:
d6:71:af:c9:d2:dc:d9:ca:45:3d:10:24:03:7f:05:
fb:6b:f8:57:40:d2:b8:b4:34:49:b2:a4:6c:93:8b:
0d:55:49:5a:9d:af:1a:36:fa:9d:ac:d1:c4:2a:9d:
71:c6:1b:ba:ec:f1:c0:b1:5a:f4:48:96:6e:4c:78:
06:d5:bc:d9:88:10:f3:6f:12:f0:92:d6:3d:67:1d:
f7:ba:20:7c:5a:a5:97:de:a8:f0:91:af:8d:b6:90:
36:f0:b5:02:bf:11:c5:cd:ad:ef:d5:86:2b:82:61:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DD:17:77:EF:6F:1F:2E:49:15:0B:F6:D0:48:45:8C:8F:A1:1E:40
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/356dd5ec-7559-45e8-81d0-9e45590b5ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0d:46:1c:e4:c7:38:ff:6b:c8:28:6a:05:c8:95:4a:0c:5d:5f:
91:d6:40:c6:40:c1:1a:9b:4c:b5:8f:f4:bd:14:ed:7d:3e:fe:
1a:f3:07:35:84:d9:47:6a:88:90:d4:ea:6a:68:26:4c:e4:bd:
cc:58:ad:de:8d:0e:9e:b5:4e:36:44:91:1e:07:4f:6d:18:82:
ad:7f:ff:ce:a3:74:df:2c:b1:80:e3:43:fc:10:46:cb:03:a2:
c3:d0:6c:14:60:8f:db:16:cb:ed:7b:27:f8:44:e8:d1:b8:63:
20:2c:ba:27:48:70:12:21:f2:14:37:23:ba:22:f0:94:3a:31:
04:e9:8b:8e:0c:2d:e1:b2:d7:48:ed:85:c0:10:23:83:10:0d:
a7:e0:a4:48:69:4f:72:86:5b:c2:8d:27:d8:2f:8e:d0:4d:cd:
ea:59:13:8f:4c:a5:67:d4:f5:1d:85:e1:1f:93:a2:f3:50:a0:
25:05:60:42:ed:49:66:11:b7:4f:dc:77:cd:95:fc:e6:96:15:
e8:26:5c:26:ca:14:4e:2a:e6:0d:3d:72:35:bd:33:57:55:74:
3b:7f:ca:92:4c:06:48:7a:b7:7d:c2:05:0f:b1:68:39:09:3b:
b8:5a:78:dd:a4:e1:6e:37:af:d1:a2:01:d9:9b:68:19:2f:82:
b6:35:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net