Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/55eb1295-2121-40dc-bdd3-a11a68da507a.roa
File: 55eb1295-2121-40dc-bdd3-a11a68da507a.roa (raw, json)
Hash identifier: twuD7zRjm0ECBA4DmWBcsUSWZuPdiy55E3fZHKcBo24=
Subject key identifier: 6D:D7:40:34:DB:AB:82:FA:AD:26:7F:7B:D4:DE:4D:F0:10:26:AB:01
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4F77E7277BE0684B8237ABDDC548190DE0D5E87F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/55eb1295-2121-40dc-bdd3-a11a68da507a.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:77:e7:27:7b:e0:68:4b:82:37:ab:dd:c5:48:19:0d:e0:d5:e8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=d5562d9af74c326e07582af058be86961e4ed7a29fd555c92e79d0d8f5c93af7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:1b:ff:8e:ca:18:50:5a:7e:51:f9:21:97:
d9:d3:d2:5a:c6:5f:dc:21:64:ce:85:c6:e9:06:ba:
ca:8c:64:f4:76:9a:5c:47:94:8b:cb:7a:3a:4e:63:
88:ce:97:d4:58:8b:f8:b3:19:05:1e:cd:ed:97:be:
17:38:00:06:9f:fd:fb:fc:9d:71:fb:9f:5d:7a:74:
43:1b:f8:cb:3b:95:71:cf:00:46:28:3c:45:e8:7b:
b0:6c:af:4e:dc:92:6b:72:25:6e:6b:79:72:c0:8e:
cd:4d:3e:69:84:a1:86:6f:ec:f4:37:4a:4a:ab:e4:
7a:74:fe:bf:20:bd:13:0f:fa:19:12:4a:07:c1:42:
0f:24:0b:f5:5a:1d:2c:98:9e:4a:5a:03:23:26:61:
10:1f:ed:0e:f3:4f:6d:c1:53:f7:56:2c:2e:65:f7:
39:64:20:91:d4:0f:a8:bb:66:1b:5e:b2:75:e9:f4:
11:a7:3e:27:c8:c9:c3:86:9c:b5:95:c2:32:08:b8:
51:78:a4:4d:16:25:7d:eb:e2:5e:e9:a4:67:97:4b:
d8:79:3e:11:a5:84:48:a3:8d:3e:4d:50:f0:18:7c:
5f:a1:fb:6f:94:55:ed:2c:89:0b:ae:0a:b3:5d:d3:
43:7d:2a:5c:de:5c:63:52:e5:3b:a9:f1:7b:19:05:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D7:40:34:DB:AB:82:FA:AD:26:7F:7B:D4:DE:4D:F0:10:26:AB:01
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/55eb1295-2121-40dc-bdd3-a11a68da507a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b4:aa:95:17:d2:8a:3c:84:05:9e:c6:36:b2:b6:25:68:9a:db:
4f:40:f4:56:96:86:03:f1:76:17:33:fb:cf:d1:b4:4d:90:3e:
ab:8c:c6:e0:e2:29:f8:92:fd:d5:6e:f9:de:87:85:77:6d:a3:
51:04:d6:b4:9f:af:17:98:d0:ff:19:58:88:d2:af:f4:9a:1e:
b3:df:e8:2b:92:a1:d7:1f:0d:84:cd:b1:70:43:ce:fe:59:ad:
64:e5:36:81:9b:58:c4:d3:45:79:75:c5:a2:c6:3a:16:b2:df:
96:55:a6:8d:9e:a9:44:aa:cd:39:02:33:4c:34:97:d0:6e:75:
53:dd:93:03:9e:ac:66:5b:4a:2c:95:84:4f:47:b9:b2:30:f7:
e9:66:51:c3:d0:b1:c3:5c:84:4b:05:31:ad:c2:c0:23:e1:30:
4a:86:a8:0f:df:0f:73:5b:65:5b:60:2f:df:0c:4f:0e:95:20:
b6:f8:be:aa:8e:e9:e7:8f:62:53:d2:fb:3d:58:6f:30:b6:23:
54:98:4e:51:df:49:41:c0:fd:04:b9:85:e3:39:23:c0:ff:69:
da:2b:a7:5f:c1:98:d3:ce:4a:73:58:f6:83:3e:be:d1:96:b9:
ba:ee:ad:53:3c:b9:a9:99:ec:b8:7c:1e:b9:e4:89:6c:c5:d8:
25:94:5d:66
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUT3fnJ3vgaEuCN6vdxUgZDeDV6H8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1NTYyZDlhZjc0YzMyNmUwNzU4MmFmMDU4YmU4Njk2MWU0ZWQ3YTI5ZmQ1
NTVjOTJlNzlkMGQ4ZjVjOTNhZjcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQrG/+OyhhQWn5R+SGX2dPSWsZf3CFkzoXG6Qa6yoxk9HaaXEeUi8t6Ok5j
iM6X1FiL+LMZBR7N7Ze+FzgABp/9+/ydcfufXXp0Qxv4yzuVcc8ARig8Reh7sGyv
TtySa3Ilbmt5csCOzU0+aYShhm/s9DdKSqvkenT+vyC9Ew/6GRJKB8FCDyQL9Vod
LJieSloDIyZhEB/tDvNPbcFT91YsLmX3OWQgkdQPqLtmG16yden0Eac+J8jJw4ac
tZXCMgi4UXikTRYlfeviXumkZ5dL2Hk+EaWESKONPk1Q8Bh8X6H7b5RV7SyJC64K
s13TQ30qXN5cY1LlO6nxexkFD1kCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRt10A0
26uC+q0mf3vU3k3wECarATAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NTVlYjEyOTUtMjEyMS00MGRjLWJkZDMtYTExYTY4ZGE1MDdhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB8P+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAtKqVF9KKPIQFnsY2srYlaJrbT0D0VpaGA/F2FzP7
z9G0TZA+q4zG4OIp+JL91W753oeFd22jUQTWtJ+vF5jQ/xlYiNKv9Joes9/oK5Kh
1x8NhM2xcEPO/lmtZOU2gZtYxNNFeXXFosY6FrLfllWmjZ6pRKrNOQIzTDSX0G51
U92TA56sZltKLJWET0e5sjD36WZRw9Cxw1yESwUxrcLAI+EwSoaoD98Pc1tlW2Av
3wxPDpUgtvi+qo7p549iU9L7PVhvMLYjVJhOUd9JQcD9BLmF4zkjwP9p2iunX8GY
085Kc1j2gz6+0Za5uu6tUzy5qZnsuHweueSJbMXYJZRdZg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net