Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4b2b90db-b1ce-4ba9-a8bb-174923f556ca.roa
File: 4b2b90db-b1ce-4ba9-a8bb-174923f556ca.roa (raw, json)
Hash identifier: jqA8ZRMhBFDcYAUggVSHXJT7Q9KAsZvEd/dVhkKTbuw=
Subject key identifier: 38:E3:E7:BF:D2:89:24:96:6B:25:84:93:24:37:05:8D:0D:90:C4:73
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24CB98D9724BB6531C39E2A004ADF37118C3C6F8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4b2b90db-b1ce-4ba9-a8bb-174923f556ca.roa
Signing time: Tue 29 Oct 2024 00:00:00 +0000
ROA not before: Tue 29 Oct 2024 00:00:00 +0000
ROA not after: Tue 03 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cb:98:d9:72:4b:b6:53:1c:39:e2:a0:04:ad:f3:71:18:c3:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 29 00:00:00 2024 GMT
Not After : Dec 3 23:59:59 2024 GMT
Subject: serialNumber=7b3e3018e6e612c6d82fab46f53737f5262e9b7ecd533847f72f5e50bf88cd31, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:af:d9:6d:9e:98:ff:93:ba:cf:e4:72:09:
44:8f:41:25:34:99:66:e9:d1:0a:1b:e7:4c:a7:c9:
f0:ca:69:eb:62:39:7b:e3:52:58:62:32:98:64:17:
8a:8c:e6:1d:6d:ed:fc:81:83:fe:2b:d6:b8:87:7a:
cc:43:27:9d:1f:4e:96:3c:2f:33:cc:46:d8:32:aa:
4d:b6:d7:07:55:0b:cf:64:ee:1a:dc:e5:96:a1:4b:
aa:9a:f1:b7:90:77:15:93:85:5f:38:ed:51:df:29:
c5:b4:db:07:7f:74:59:82:6f:4a:50:2a:9d:4c:a0:
c1:08:00:8f:2e:7a:0c:ad:51:cd:68:41:e9:99:91:
6b:1e:02:bf:1d:23:d9:5e:3d:bb:de:5b:d2:81:b2:
bd:f5:8d:7c:05:7c:73:42:79:1e:d0:22:8e:93:43:
7a:cf:df:c1:01:2e:d8:ed:85:4a:ff:34:58:a8:2f:
7f:0d:1b:33:6b:63:49:3d:5f:ca:b6:95:1b:94:63:
f4:58:69:36:2a:07:f5:72:98:8e:11:2f:59:e7:f9:
75:b6:02:f3:be:60:36:ab:65:37:88:f0:7d:c4:a4:
4e:c7:68:af:09:e4:6d:5b:5c:20:aa:07:46:80:09:
8f:96:15:9c:e1:21:53:8c:72:dd:91:11:64:fb:3c:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:E7:BF:D2:89:24:96:6B:25:84:93:24:37:05:8D:0D:90:C4:73
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4b2b90db-b1ce-4ba9-a8bb-174923f556ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:65:c1:85:2d:54:8b:03:a1:1b:55:7d:40:a7:61:77:fd:70:
0f:d5:5e:c3:b1:43:8e:b2:fa:3b:7c:d8:fb:72:11:5a:55:99:
7a:d5:77:59:8d:cf:d0:8e:71:b2:78:c9:b8:a9:96:ce:9d:10:
30:05:d2:c5:aa:6d:13:3a:15:42:27:60:53:36:ab:91:29:eb:
c9:7c:34:22:ff:65:ff:7f:5c:3e:26:84:3a:90:a1:19:6b:49:
69:9c:8e:30:27:82:78:a9:6a:f4:16:b1:40:e6:44:7e:58:a1:
78:78:43:78:50:43:d8:16:ad:a3:2a:8d:31:00:a7:6a:66:d9:
71:7d:6f:31:b0:c5:63:97:f2:f0:a1:c1:44:df:08:2d:d6:5d:
2e:63:18:f2:dd:9b:50:e2:00:09:ee:29:fb:a0:8c:b3:f1:ae:
13:d3:07:94:1f:24:44:8e:5e:34:d6:72:b4:ae:fa:90:76:ec:
62:75:c7:82:73:a6:b3:88:f4:1e:52:ab:62:7d:41:24:61:df:
5a:22:a5:99:8e:67:9c:a3:83:5d:23:2a:0b:5d:d0:f8:ab:b6:
36:bc:f8:82:c0:b2:ef:ef:0b:fb:21:d6:db:06:4a:2a:3c:d4:
fd:d3:65:62:c5:e4:6d:f2:59:65:09:72:15:5d:05:15:09:4d:
ed:f7:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net