Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4318df07-9ca9-4ca8-8daf-2c7e8b4424e4.roa
File: 4318df07-9ca9-4ca8-8daf-2c7e8b4424e4.roa (raw, json)
Hash identifier: EaM9lDPLgfYcP+d+zTeiEqQSM0d61MxbXy6XvHeVOO4=
Subject key identifier: 16:F2:DA:EE:13:25:80:FA:87:D7:56:B6:3B:5E:D5:EA:00:28:11:01
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 56C49085883E118ADB4C1BEDB0669523011604B9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4318df07-9ca9-4ca8-8daf-2c7e8b4424e4.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c4:90:85:88:3e:11:8a:db:4c:1b:ed:b0:66:95:23:01:16:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=e558a3938070d3fceeedbe0f8019087322d9e4afb8b46100b8d9f232b1394b84, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:31:c0:71:5c:76:02:79:4f:8f:60:75:9d:
12:43:1f:23:9b:d9:da:19:9a:c9:96:a0:f3:c0:4d:
26:72:22:07:ca:be:d1:80:a5:2a:9c:1d:ee:73:ea:
2f:c0:70:be:8a:8a:36:ec:4f:5c:7c:cc:98:6d:0f:
d9:61:a8:5b:20:ab:a4:ff:62:3f:6b:b2:47:20:84:
9a:56:b1:7b:1b:83:8a:bf:e5:10:84:5b:1f:4c:9f:
d0:1c:d3:b2:92:17:88:2f:a2:34:bd:3c:73:60:c7:
f0:6e:d6:b6:e3:ed:0f:21:46:ce:dc:89:08:f4:d8:
3f:8f:fa:c9:0f:1d:9e:fd:96:e4:8c:02:ae:7c:af:
39:32:19:0c:ab:bd:f2:47:2b:0e:de:a4:f5:f1:48:
89:2e:93:97:c7:99:ee:5a:ed:62:25:4c:59:59:df:
fe:ba:0a:23:23:fb:4c:2f:49:bd:18:32:39:43:99:
ff:a3:12:b7:6b:ff:2f:c2:69:97:a3:de:ec:e5:b4:
44:b5:20:68:db:da:5c:d6:d8:bc:6f:9b:57:89:98:
68:63:85:a3:c1:52:62:30:03:53:29:26:0f:aa:11:
28:85:e1:79:34:f9:d9:35:22:c3:76:ba:ac:e1:c7:
b9:f8:31:ee:a4:53:40:ac:9c:1c:2d:bd:73:bf:ca:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F2:DA:EE:13:25:80:FA:87:D7:56:B6:3B:5E:D5:EA:00:28:11:01
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4318df07-9ca9-4ca8-8daf-2c7e8b4424e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:78:9d:8e:18:a3:f8:92:65:bf:97:82:b6:ae:0d:c5:72:75:
a4:5a:93:e6:3c:75:9f:7c:a3:bf:51:46:78:75:e4:62:02:73:
c8:17:54:ba:bf:a1:d1:ce:4c:55:d4:e7:3b:cb:11:41:f6:01:
f9:87:ce:cc:e5:34:b1:d4:9e:f1:ed:c9:fe:16:90:26:5e:d8:
b3:cf:0d:a6:3c:c9:6b:5e:29:6e:56:04:47:a6:8c:68:a9:d5:
ed:69:29:54:b6:7f:11:9f:6a:d1:d3:07:a3:b7:f7:07:9c:67:
f2:b3:ff:c0:87:53:4c:63:0f:04:7d:aa:df:a8:d0:32:21:d5:
c8:93:0b:fb:36:63:dc:77:f2:ee:89:ba:57:30:77:1b:05:21:
d4:67:59:5c:1e:91:84:fc:44:61:c8:58:83:dd:b5:c6:12:c7:
60:99:75:7b:d4:26:69:7f:00:07:dc:fe:04:6f:40:0d:7e:c2:
89:49:7b:1f:6e:b1:67:36:cc:a2:44:da:19:03:a6:0d:b1:e1:
d1:57:ef:b0:43:c8:00:7a:28:67:8e:a8:ff:e6:8c:a0:98:0e:
66:1e:22:b0:f0:89:50:75:57:56:19:68:60:ce:97:19:75:ab:
e3:41:e7:32:d8:fc:5c:cd:35:05:7c:2a:b4:5f:cb:48:b2:45:
06:39:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net