Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/440c00fc-f0f9-43fd-bd09-1f1d916f54fe.roa
File: 440c00fc-f0f9-43fd-bd09-1f1d916f54fe.roa (raw, json)
Hash identifier: wN6W5wFc6ylmh4Pc1aoBUvy2uNHQeUm/CGKCjrLGGd4=
Subject key identifier: C5:F9:01:A9:49:F4:3F:29:63:C3:F3:49:58:C3:58:31:13:54:7C:DF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4AE280782F292F5DBB571147326F899E9BACAA3D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/440c00fc-f0f9-43fd-bd09-1f1d916f54fe.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.48.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e2:80:78:2f:29:2f:5d:bb:57:11:47:32:6f:89:9e:9b:ac:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=a2a7901ac2928af5522ccedbf82770c7c6aa7163a10d09dcdd4a8eba2bf540c0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:a5:49:3c:57:1b:c6:3e:ca:31:57:50:84:
bd:3a:3b:87:73:f0:9e:c6:4d:7b:0c:1a:fe:77:1b:
9b:91:48:dd:47:e9:e1:d8:0a:2e:c5:80:9f:30:6a:
af:5e:4d:58:83:b8:a5:dd:d6:ac:25:0d:9c:48:02:
16:a4:64:19:ad:ac:bc:ad:75:cb:7b:4e:cb:ea:c0:
11:36:67:76:6b:30:23:27:5e:73:64:28:40:f0:7b:
a8:75:cf:9d:be:b1:c7:c1:8c:08:d7:7f:c4:aa:f6:
42:72:9d:7b:ac:8a:d6:3d:d1:ef:59:6a:74:51:1a:
d7:b4:5e:83:d4:e6:aa:04:bc:f5:bc:e1:04:20:dd:
ee:df:80:2b:af:42:66:cd:bd:86:16:07:77:78:4b:
ba:72:b8:0d:54:54:52:d5:da:75:df:9b:cf:e4:e8:
ed:a1:f6:c9:ae:9f:37:60:a7:37:74:ab:39:9f:2f:
d4:45:90:d7:f0:78:f4:c3:2c:d6:de:65:16:0c:b4:
c0:ad:61:4f:11:d6:55:e8:f8:cc:aa:ff:87:99:c6:
96:8d:71:fa:5f:6c:28:1b:2a:83:f4:41:42:1c:c4:
f8:f4:4d:52:cf:6a:1b:f1:1e:ad:55:a6:34:56:c0:
23:b7:6c:42:05:18:0f:ab:39:46:5c:2e:4d:a6:cb:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:01:A9:49:F4:3F:29:63:C3:F3:49:58:C3:58:31:13:54:7C:DF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/440c00fc-f0f9-43fd-bd09-1f1d916f54fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.48.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c2:37:fe:4f:e4:3b:4b:28:7e:1a:7f:e8:2e:b2:d3:5e:40:6a:
67:d4:15:14:1a:fd:2c:63:65:71:4b:11:d7:f9:e8:61:bc:f6:
e7:c7:08:25:9b:ba:d0:40:6e:35:2c:f6:2d:9b:22:00:ff:72:
c7:69:95:37:ce:2e:62:c8:2c:9e:2d:9c:ae:11:0a:6b:0a:0b:
01:e6:0e:7e:9d:54:33:bb:92:b3:c7:b8:0a:8c:ea:da:e0:ce:
54:e5:83:ba:12:8a:8f:5b:27:d2:95:70:1f:c6:2a:8f:ca:89:
1e:f1:b4:6c:af:81:c7:7b:e0:29:a5:03:99:e0:40:e6:3f:f0:
fa:8d:de:82:32:1e:e8:2b:96:44:e9:57:0f:4f:df:52:38:2e:
87:25:d8:71:46:16:f2:17:19:98:6e:15:ab:03:31:ba:6c:05:
55:66:60:f9:31:cd:94:0b:02:29:d8:88:92:53:fe:ce:0d:33:
ff:31:84:85:13:37:ff:bc:b3:75:ea:51:8e:db:3f:78:7e:af:
bd:64:9a:6c:8b:60:41:32:2b:f5:0d:b9:24:78:32:4b:c1:e6:
2d:82:fb:ef:02:e4:8c:f2:04:f6:9f:b0:64:0f:c4:ad:0a:9b:
9d:04:84:48:26:2d:66:cb:be:ef:25:c6:17:fa:3c:93:21:e3:
77:a2:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net