Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4c110694-386d-49d5-9883-bd1723f43820.roa
File: 4c110694-386d-49d5-9883-bd1723f43820.roa (raw, json)
Hash identifier: jPaTrDec6ifon9D7+JU0G7fXkAYGgCHX7Svj4fuGB4o=
Subject key identifier: 65:01:04:48:AF:43:F5:7C:F4:59:BC:3E:CB:F3:95:9D:3E:EE:A8:B5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1965152C524D43F155EC44C811C2E93E67121CF3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4c110694-386d-49d5-9883-bd1723f43820.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.212.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:65:15:2c:52:4d:43:f1:55:ec:44:c8:11:c2:e9:3e:67:12:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=5af88a5f94bfbbc66de2c505347e07167e0592910245f594df85a7daff6ae0dd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:d1:6e:9b:8b:2a:26:ca:5f:20:4f:9c:97:
e8:c7:3b:71:4e:4a:cf:63:3e:07:4e:6d:42:a5:e4:
32:36:9a:b2:0a:db:b0:51:e8:52:11:83:f8:d8:aa:
90:b9:cd:94:24:ac:16:81:c2:06:78:a3:50:16:21:
0e:5f:1e:5f:4e:2e:4c:2a:dd:b1:83:14:74:99:e7:
f0:04:3e:cc:3a:cd:5d:74:23:7d:6f:12:5e:dc:70:
c3:45:f4:cb:36:a0:4b:ee:3c:2b:c1:a8:81:cf:ab:
6e:92:7e:36:72:fd:39:d1:f4:b1:80:44:a5:4c:ca:
9a:1f:b3:80:24:4d:55:b7:45:5d:f0:2a:73:8b:af:
e3:c2:b9:5c:ed:03:7d:a7:b7:70:ca:44:ef:c8:f7:
f4:e7:57:b8:10:40:0b:61:6f:fc:98:15:0b:fb:f5:
1b:2f:86:f9:2a:16:8b:19:1c:51:74:26:63:8c:93:
32:d7:5b:82:6e:c2:b0:ac:ad:84:08:18:70:7c:5c:
03:02:ff:23:f8:01:47:53:25:5f:85:d5:a5:42:9e:
99:78:e9:64:f9:a6:55:29:a5:6e:2f:6d:ef:36:8a:
e8:7c:97:8e:b0:dc:bf:b2:06:d6:9a:a6:b9:61:b3:
c8:79:87:be:e1:b2:97:f6:b5:68:4e:e7:5a:93:a7:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:04:48:AF:43:F5:7C:F4:59:BC:3E:CB:F3:95:9D:3E:EE:A8:B5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4c110694-386d-49d5-9883-bd1723f43820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
42:b4:9b:13:90:bb:32:82:07:0b:0e:a6:ee:22:67:c7:6a:4f:
03:6a:17:16:2a:34:9f:3b:af:d4:ba:9f:a9:81:b3:a8:85:8a:
17:5d:73:da:16:00:82:2f:a6:5c:ed:84:e5:5e:62:68:0f:2b:
a0:0d:e8:95:84:b0:93:a9:e6:ba:a8:f2:9c:88:f5:a6:a9:52:
7a:b1:6c:b7:1b:ec:05:b2:1f:75:2a:da:5d:71:98:0d:ef:b5:
3a:86:12:30:a7:90:76:ce:73:dc:68:e3:ab:2e:a2:2b:04:a6:
1c:b9:fd:bd:34:27:89:99:27:28:ae:43:a2:29:5a:e3:39:da:
d7:de:17:ae:ef:69:b6:ce:fb:11:39:50:da:16:64:7a:69:52:
9d:e8:f9:73:db:5e:bd:a6:5b:d1:5d:18:20:1d:9c:59:86:94:
fc:f4:d3:bb:c1:47:f4:51:c8:ed:30:5e:69:7a:c2:80:13:10:
44:1d:1c:ca:b5:29:18:a3:60:9a:cc:ed:75:93:f9:e9:54:4e:
00:7b:22:08:0b:a3:f7:98:c2:7a:ce:fa:0e:1c:71:7a:32:e9:
09:93:d7:6a:3e:c9:2d:b0:d8:6e:db:af:dc:84:0f:36:c9:73:
24:77:fd:14:74:48:b8:c9:f8:f7:89:c8:a6:3d:25:a0:e8:c0:
99:e2:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net