Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49e55691-07d2-4a06-87d9-31acb51cef86.roa
File: 49e55691-07d2-4a06-87d9-31acb51cef86.roa (raw, json)
Hash identifier: 9txaoi2oAiglLJZl5QhlNYjlM/gC4l/6K46jXh41DQU=
Subject key identifier: C8:F8:B0:F9:ED:87:21:4D:02:62:D7:89:0C:79:12:26:1D:C6:B3:61
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3F95ED668BE66150C54BEC008B090DB5438C7993
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49e55691-07d2-4a06-87d9-31acb51cef86.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:95:ed:66:8b:e6:61:50:c5:4b:ec:00:8b:09:0d:b5:43:8c:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=b312533ac7f9741730fdd77c5f7ac92e038ea1abcabde811b13fc3193dff82c1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:17:c5:d7:39:66:11:f1:b6:ca:6e:70:9b:
33:60:34:80:d3:7c:7f:ca:a9:8c:54:b9:4b:52:6f:
ea:78:27:93:74:73:f2:53:0e:ad:34:6a:d0:33:98:
b0:21:63:66:22:ac:1a:51:35:43:64:98:41:d1:37:
ba:a4:09:4c:3c:c8:d5:0d:c5:2d:89:a5:c2:dc:66:
28:ac:90:2e:cb:a3:dd:54:33:e7:b4:b5:e7:74:88:
5c:00:0a:36:df:aa:2d:9d:7f:e4:f3:04:92:66:71:
d8:4e:79:f5:c0:6e:b4:9f:6b:92:d0:8a:90:a3:da:
25:5e:06:87:ac:e6:54:d9:fa:ba:68:b2:f3:fe:1f:
7f:3f:0c:22:f4:58:f0:15:f1:48:e7:97:24:2c:65:
a3:06:cb:02:90:04:02:63:76:3f:b9:4f:d7:0a:f7:
c9:36:58:48:bf:3f:67:10:d1:b3:26:b0:08:86:f7:
e0:64:a3:18:de:34:3d:c2:3a:62:a3:2f:a6:0b:84:
63:c8:67:15:37:42:25:f8:2d:ff:e7:cd:8a:7e:61:
44:7f:a4:13:fa:2e:4c:c9:b8:fc:ad:0f:38:d0:83:
1d:29:33:55:73:1f:ea:dd:95:45:88:98:97:df:f8:
8d:dd:99:18:41:eb:91:7c:3e:80:6e:fc:07:7c:e3:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F8:B0:F9:ED:87:21:4D:02:62:D7:89:0C:79:12:26:1D:C6:B3:61
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49e55691-07d2-4a06-87d9-31acb51cef86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0f:95:45:fe:39:91:b8:90:5e:95:9a:d0:5f:e1:0b:d7:fe:8d:
ee:81:cc:cd:2f:a0:cf:39:69:9b:ca:20:ed:c3:7a:6d:18:ba:
6e:99:16:2f:34:fe:22:e5:8c:47:62:f8:a8:96:a3:8d:94:99:
15:d2:ba:76:64:35:49:4b:d3:50:bc:c1:43:da:27:df:40:fa:
ab:16:28:64:57:38:15:14:d5:cf:5a:88:69:37:f8:82:7b:8a:
e1:24:47:02:f5:ac:2e:3c:2c:72:fe:f2:96:aa:1b:cd:a1:8b:
bc:3a:77:1c:bf:c2:d9:fc:9b:8d:20:36:d1:f4:9b:2a:10:44:
37:6b:a8:76:a3:1c:e5:b8:78:e7:e7:fd:73:24:47:47:c7:c5:
9a:a8:43:ff:a0:a1:8f:ec:99:b2:00:50:3e:d0:e3:ac:1f:f3:
a1:6d:03:57:4a:7c:fe:53:22:eb:5d:1b:45:bf:67:fd:51:78:
33:2b:4a:81:f0:cc:5c:55:bc:ef:59:36:31:d2:23:2b:fc:10:
3a:4b:ff:6c:78:7e:ce:08:dc:d7:17:c4:8d:03:1f:d0:3a:4e:
bf:b7:49:12:4f:c0:ef:2f:08:62:85:8a:60:6c:3d:5c:44:a6:
2e:7f:ee:62:28:3e:cf:9e:85:c6:bb:83:fd:21:03:8d:09:08:
c3:f7:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net