Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3f8b75d5-ee83-4794-8d04-a4e42412f346.roa
File: 3f8b75d5-ee83-4794-8d04-a4e42412f346.roa (raw, json)
Hash identifier: ythM6NPgarCuoxijeniRAs2jM9v8GCOsDiy2dBESxI4=
Subject key identifier: AB:95:06:3E:B3:EF:84:48:92:0F:C5:9C:5F:5B:E4:D1:E8:9D:C8:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 73CA908A8C2F38A0315139B3B29A5D60BB7551E6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3f8b75d5-ee83-4794-8d04-a4e42412f346.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.48.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ca:90:8a:8c:2f:38:a0:31:51:39:b3:b2:9a:5d:60:bb:75:51:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=43e1e04be5e019c95476127430239c868efd9348d64cd72d1a15fb66293702f6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:15:c6:20:d3:30:4b:77:d3:27:86:22:59:
ab:ce:62:ff:2d:9c:b2:20:ed:99:4c:5c:bd:68:05:
21:8e:98:90:0a:2f:5f:e6:f5:98:7c:cb:a4:8e:b3:
7c:ae:e9:3c:22:48:05:50:b9:79:04:04:de:55:79:
81:2e:ce:a8:d6:10:d4:b0:dc:55:ec:e6:5e:e3:fd:
b1:51:fe:b2:e1:ef:3c:14:78:21:86:ac:14:ca:60:
99:62:03:4b:b8:c6:02:3e:46:f6:fe:2e:ff:a7:94:
23:83:fe:1d:ef:55:9c:ff:69:3d:0b:8e:be:2c:3c:
d3:c1:d7:cd:ab:64:c3:83:5f:be:64:3c:69:33:7f:
92:62:49:a0:c8:f6:cb:9c:f6:28:54:14:78:3e:6d:
b5:81:97:4a:be:57:0e:53:b9:f3:54:e9:5a:45:5d:
8b:32:05:75:f3:e2:4b:47:72:18:4c:4c:29:12:59:
0a:e7:60:72:cd:25:7c:aa:e8:57:21:9a:51:fd:7a:
2e:b7:26:29:76:b1:5f:29:78:b1:b4:8f:ae:df:48:
f9:95:57:73:b1:84:93:df:55:06:6c:3d:c9:aa:ad:
58:66:e5:04:30:b7:bd:0b:b4:f7:39:b5:f7:1d:1e:
e0:51:81:27:89:21:49:9f:4f:2e:95:ae:f2:d5:4d:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:06:3E:B3:EF:84:48:92:0F:C5:9C:5F:5B:E4:D1:E8:9D:C8:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3f8b75d5-ee83-4794-8d04-a4e42412f346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.48.0.0/15
Signature Algorithm: sha256WithRSAEncryption
10:c3:4b:ab:bd:30:a9:72:a3:24:71:4d:78:b5:44:d0:48:34:
a9:2f:5a:5f:57:8f:79:af:bd:e6:42:2c:9d:30:6f:1b:2d:73:
eb:30:f0:ce:fb:41:48:be:d0:e2:7e:02:fe:3b:e0:61:c5:80:
62:3a:08:35:00:f5:1d:6d:45:28:10:69:35:e7:9c:bd:b3:6a:
c6:38:0f:5d:71:db:72:bb:de:1b:cc:2a:88:9d:bd:88:8c:88:
8a:c2:c9:a0:1a:2c:54:4e:4d:63:5c:e8:a6:89:c7:b6:41:1e:
d1:c7:30:7b:b2:b4:11:35:a9:43:ad:53:c7:e5:92:b7:3d:ea:
db:b1:e6:8d:85:b5:f0:54:0e:12:9c:75:0e:4f:e6:f6:33:41:
4e:bc:85:17:f6:da:0c:e5:11:92:48:22:bf:f4:63:0b:57:c7:
8d:c0:b1:0b:32:2e:dd:f0:e7:40:b0:7c:d7:ba:14:9c:49:90:
2e:c1:d1:8f:0d:e5:89:39:5a:34:68:15:6e:93:8e:e3:cb:b5:
0c:26:01:76:51:c6:71:06:11:5f:5f:c6:62:d6:57:94:bb:c6:
27:80:7b:0f:c2:01:79:8e:f0:64:3b:1c:ef:14:8c:09:90:89:
53:2d:d6:16:1c:51:e1:9c:41:64:90:08:9d:1d:2d:04:44:fd:
64:5e:51:96
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUc8qQiowvOKAxUTmzsppdYLt1UeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDYwMDAwMDBaFw0yNTAxMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDQzZTFlMDRiZTVlMDE5Yzk1NDc2MTI3NDMwMjM5Yzg2OGVmZDkzNDhkNjRj
ZDcyZDFhMTVmYjY2MjkzNzAyZjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOHvFcYg0zBLd9MnhiJZq85i/y2csiDtmUxcvWgFIY6YkAovX+b1mHzLpI6z
fK7pPCJIBVC5eQQE3lV5gS7OqNYQ1LDcVezmXuP9sVH+suHvPBR4IYasFMpgmWID
S7jGAj5G9v4u/6eUI4P+He9VnP9pPQuOviw808HXzatkw4NfvmQ8aTN/kmJJoMj2
y5z2KFQUeD5ttYGXSr5XDlO581TpWkVdizIFdfPiS0dyGExMKRJZCudgcs0lfKro
VyGaUf16LrcmKXaxXyl4sbSPrt9I+ZVXc7GEk99VBmw9yaqtWGblBDC3vQu09zm1
9x0e4FGBJ4khSZ9PLpWu8tVNqFcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSrlQY+
s++ESJIPxZxfW+TR6J3IxTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
M2Y4Yjc1ZDUtZWU4My00Nzk0LThkMDQtYTRlNDI0MTJmMzQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATMwMA0G
CSqGSIb3DQEBCwUAA4IBAQAQw0urvTCpcqMkcU14tUTQSDSpL1pfV495r73mQiyd
MG8bLXPrMPDO+0FIvtDifgL+O+BhxYBiOgg1APUdbUUoEGk155y9s2rGOA9dcdty
u94bzCqInb2IjIiKwsmgGixUTk1jXOimice2QR7RxzB7srQRNalDrVPH5ZK3Perb
seaNhbXwVA4SnHUOT+b2M0FOvIUX9toM5RGSSCK/9GMLV8eNwLELMi7d8OdAsHzX
uhScSZAuwdGPDeWJOVo0aBVuk47jy7UMJgF2UcZxBhFfX8Zi1leUu8YngHsPwgF5
jvBkOxzvFIwJkIlTLdYWHFHhnEFkkAidHS0ERP1kXlGW
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net