Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
File: 37cafa51-a122-4dc3-9462-83922f031bb7.roa (raw, json)
Hash identifier: 1IUk0RTbRfqToH4URELCI80nTW/PTbe0D6PNNRtAyrY=
Subject key identifier: 6A:46:34:44:4B:C2:1C:A2:CC:EE:90:0A:9E:10:16:7A:DD:28:1C:73
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 762AD60DD459B75841BC4C6FEB9EB1E2B7DE6055
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2a:d6:0d:d4:59:b7:58:41:bc:4c:6f:eb:9e:b1:e2:b7:de:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=a4d1f441e7037b7ae3e47d72f41561ef1c771ca209a17b55ec71b34d3fb98e80, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:90:76:5a:e3:63:53:a6:ea:79:9b:af:12:
5c:d1:81:35:0c:18:f0:3c:46:b2:71:c0:2d:68:5f:
7b:d6:86:ee:d6:db:fd:c2:dc:20:4d:aa:3a:b8:71:
01:4a:a4:ae:14:10:05:54:28:29:c1:50:cd:90:5f:
27:9b:c3:15:c4:5a:fe:f2:86:ff:28:0f:f4:c5:f0:
d2:77:62:6c:1b:ae:5e:d9:00:65:d3:63:3b:78:d9:
11:ad:c0:1c:02:67:ab:44:0c:92:38:62:95:1b:25:
29:fa:42:96:b5:87:c1:cc:10:a9:24:b0:4b:32:98:
19:11:39:ff:2a:86:d6:ff:a6:e7:3b:4e:8c:3c:9b:
b1:1d:98:e9:27:1e:1f:47:69:ae:1d:04:36:77:c9:
24:60:5f:5b:b2:f0:df:33:c4:b3:32:91:40:83:7a:
78:e6:c9:cf:aa:e8:4d:35:2e:c4:d6:6b:4b:35:72:
a7:71:70:6b:c9:e5:34:65:7d:f3:25:e8:63:e1:36:
6f:de:cc:41:ad:41:d0:c2:2a:eb:3c:d9:5c:7a:fd:
a3:ca:75:fb:20:79:c8:a3:92:de:e1:1e:b8:77:f4:
09:f2:28:03:98:71:da:ff:aa:32:37:a7:8d:37:c8:
ef:b1:8b:72:89:ba:d9:11:70:09:8a:3a:1f:a1:13:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:34:44:4B:C2:1C:A2:CC:EE:90:0A:9E:10:16:7A:DD:28:1C:73
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:c5:d3:36:80:4e:1a:56:8f:74:f5:07:24:6e:73:76:a4:35:
69:f5:5f:3b:35:ed:a2:f1:d3:18:55:91:d3:ec:9a:1c:f2:2e:
fb:ae:26:ad:98:71:db:a6:87:9e:61:b8:fd:35:b6:16:4c:cb:
8b:fe:51:c6:08:dd:4e:87:91:d4:e0:1a:d9:84:bf:1a:ba:6a:
94:fb:7a:d8:d2:ad:d3:29:cb:3f:3f:e7:ce:e2:a9:15:c6:1e:
a7:62:98:c2:01:92:2a:35:5a:1c:ca:b4:12:6e:cc:3c:6c:a1:
fd:13:2d:df:97:a5:f6:30:60:63:0d:24:e3:28:53:1f:b6:2a:
06:2f:3d:c3:de:8d:ef:35:2f:cc:da:fb:fe:37:0c:cd:2e:69:
ba:7c:34:b5:d5:b1:1e:8d:09:52:1a:18:38:81:b3:13:f5:02:
26:4d:e1:46:b1:df:be:36:ae:27:ad:df:84:8e:16:4f:42:ff:
33:07:b4:8c:a4:dd:72:83:e1:44:7c:9f:1d:93:2c:64:25:8e:
4d:74:da:97:33:53:be:80:ba:bb:11:7a:60:87:3e:63:a6:25:
5a:49:58:c6:53:b4:dc:df:ab:e6:e1:b9:cd:0c:ba:94:ae:e9:
4e:3f:59:b9:57:1a:51:90:39:dd:34:e2:87:e3:1c:89:27:6e:
28:f4:3f:e2
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUdirWDdRZt1hBvExv656x4rfeYFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGE0ZDFmNDQxZTcwMzdiN2FlM2U0N2Q3MmY0MTU2MWVmMWM3NzFjYTIwOWEx
N2I1NWVjNzFiMzRkM2ZiOThlODAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI3BkHZa42NTpup5m68SXNGBNQwY8DxGsnHALWhfe9aG7tbb/cLcIE2qOrhx
AUqkrhQQBVQoKcFQzZBfJ5vDFcRa/vKG/ygP9MXw0ndibBuuXtkAZdNjO3jZEa3A
HAJnq0QMkjhilRslKfpClrWHwcwQqSSwSzKYGRE5/yqG1v+m5ztOjDybsR2Y6Sce
H0dprh0ENnfJJGBfW7Lw3zPEszKRQIN6eObJz6roTTUuxNZrSzVyp3Fwa8nlNGV9
8yXoY+E2b97MQa1B0MIq6zzZXHr9o8p1+yB5yKOS3uEeuHf0CfIoA5hx2v+qMjen
jTfI77GLcom62RFwCYo6H6ET7E0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRqRjRE
S8IcoszukAqeEBZ63SgcczAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzdjYWZhNTEtYTEyMi00ZGMzLTk0NjItODM5MjJmMDMxYmI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJ/0MA0G
CSqGSIb3DQEBCwUAA4IBAQCGxdM2gE4aVo909QckbnN2pDVp9V87Ne2i8dMYVZHT
7Joc8i77riatmHHbpoeeYbj9NbYWTMuL/lHGCN1Oh5HU4BrZhL8aumqU+3rY0q3T
Kcs/P+fO4qkVxh6nYpjCAZIqNVocyrQSbsw8bKH9Ey3fl6X2MGBjDSTjKFMftioG
Lz3D3o3vNS/M2vv+NwzNLmm6fDS11bEejQlSGhg4gbMT9QImTeFGsd++Nq4nrd+E
jhZPQv8zB7SMpN1yg+FEfJ8dkyxkJY5NdNqXM1O+gLq7EXpghz5jpiVaSVjGU7Tc
36vm4bnNDLqUrulOP1m5VxpRkDndNOKH4xyJJ24o9D/i
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net