Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/55ede288-20da-46a9-b532-c24cfd455a05.roa
File: 55ede288-20da-46a9-b532-c24cfd455a05.roa (raw, json)
Hash identifier: HPtxTnxO7vmYXeCqzMg424rbgDPbc55QTlWcJTQXofU=
Subject key identifier: 09:6D:20:E0:48:40:F9:E0:C8:8C:C7:57:EA:B5:4A:DD:14:CB:E8:AD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0C20CDFE1C98B3001B267455D8AB52D7BFA24191
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/55ede288-20da-46a9-b532-c24cfd455a05.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:20:cd:fe:1c:98:b3:00:1b:26:74:55:d8:ab:52:d7:bf:a2:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=5725bfd7fe3fd288830e3b909b4d21a453177ef505b695ef8d3f125a64370e0c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:72:1a:86:92:2b:8b:82:6f:b8:80:f0:00:
4e:20:10:5f:52:70:84:8c:34:5d:46:8c:8b:07:3d:
cb:06:b0:d9:d6:2e:34:80:76:5c:8a:fc:97:ed:a2:
6c:7a:5d:b6:e6:17:97:67:aa:bd:8c:a3:c3:11:4f:
03:e4:1c:4c:21:07:49:f5:c1:b1:fd:da:66:71:5e:
6c:08:61:3c:d2:f4:8f:7c:aa:8d:57:95:de:76:89:
32:d1:93:1f:1f:af:4f:53:fe:ed:aa:95:37:3b:2e:
3a:1b:38:34:e1:4c:87:37:4e:7f:e3:d5:55:12:0d:
11:1d:56:19:07:63:43:32:1c:b1:64:06:38:bd:2f:
17:ae:65:d1:44:2a:de:4c:c2:f9:b2:72:ae:45:c6:
d2:30:e1:9a:56:57:04:4f:a7:ea:5f:f4:05:f1:60:
ed:df:9e:d3:e0:11:13:51:e9:95:75:b1:e0:32:bd:
ab:88:ea:c9:52:3e:c3:4b:25:87:17:0f:ba:49:7b:
73:8b:78:62:d0:95:8a:9f:f3:2c:cc:74:87:a9:05:
b2:83:a6:30:f1:66:34:90:47:b0:97:e7:78:3c:34:
a7:cd:8c:da:7e:0f:7c:db:51:b2:8f:92:32:f9:70:
50:97:66:e5:0c:7e:b7:1a:18:1a:f3:06:25:8d:ee:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6D:20:E0:48:40:F9:E0:C8:8C:C7:57:EA:B5:4A:DD:14:CB:E8:AD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/55ede288-20da-46a9-b532-c24cfd455a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:70:e3:45:6e:97:08:fd:2d:a6:c3:7e:6e:a1:f7:1d:54:90:
ab:15:34:2c:66:cf:a5:1e:b4:4e:4a:1f:9f:73:02:de:19:c0:
11:84:7c:01:3e:1a:7b:6d:3d:ef:84:95:df:23:a8:26:c3:9c:
91:87:7b:f2:31:57:ed:ba:aa:30:15:79:50:6f:85:74:ea:f7:
93:c2:81:0e:60:9a:a5:02:5a:7f:bc:01:38:a3:b0:fe:17:a1:
e4:f7:14:8a:67:10:c0:59:69:2e:d4:a4:23:50:e5:62:72:52:
21:ba:41:fa:14:4a:d2:ea:f2:f1:25:ea:20:4b:32:df:e4:88:
b6:3f:a9:a7:b8:98:46:d5:02:c7:02:74:98:f9:98:15:a2:a5:
d5:c3:e7:41:cc:7f:89:93:b4:20:04:5b:8f:0d:c5:d0:9c:69:
28:67:8c:b3:f8:cd:17:61:bf:3c:ab:45:d7:d6:7c:a4:80:21:
f1:9a:62:9f:54:a3:72:00:6b:11:8e:81:5f:26:29:70:76:f2:
05:74:a4:4b:7d:df:5c:90:9e:b5:f2:f5:1f:38:78:f4:5f:94:
40:e7:77:99:1c:93:d7:0b:43:b0:10:59:6a:0c:8a:0d:f5:59:
33:d7:09:40:59:92:e5:5f:fd:22:3d:f1:71:e7:3b:49:6b:62:
a0:d9:f4:0f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUDCDN/hyYswAbJnRV2KtS17+iQZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDU3MjViZmQ3ZmUzZmQyODg4MzBlM2I5MDliNGQyMWE0NTMxNzdlZjUwNWI2
OTVlZjhkM2YxMjVhNjQzNzBlMGMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVbchqGkiuLgm+4gPAATiAQX1JwhIw0XUaMiwc9ywaw2dYuNIB2XIr8l+2i
bHpdtuYXl2eqvYyjwxFPA+QcTCEHSfXBsf3aZnFebAhhPNL0j3yqjVeV3naJMtGT
Hx+vT1P+7aqVNzsuOhs4NOFMhzdOf+PVVRINER1WGQdjQzIcsWQGOL0vF65l0UQq
3kzC+bJyrkXG0jDhmlZXBE+n6l/0BfFg7d+e0+ARE1HplXWx4DK9q4jqyVI+w0sl
hxcPukl7c4t4YtCVip/zLMx0h6kFsoOmMPFmNJBHsJfneDw0p82M2n4PfNtRso+S
MvlwUJdm5Qx+txoYGvMGJY3udB0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQJbSDg
SED54MiMx1fqtUrdFMvorTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NTVlZGUyODgtMjBkYS00NmE5LWI1MzItYzI0Y2ZkNDU1YTA1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOAMA0G
CSqGSIb3DQEBCwUAA4IBAQAncONFbpcI/S2mw35uofcdVJCrFTQsZs+lHrROSh+f
cwLeGcARhHwBPhp7bT3vhJXfI6gmw5yRh3vyMVftuqowFXlQb4V06veTwoEOYJql
Alp/vAE4o7D+F6Hk9xSKZxDAWWku1KQjUOViclIhukH6FErS6vLxJeogSzLf5Ii2
P6mnuJhG1QLHAnSY+ZgVoqXVw+dBzH+Jk7QgBFuPDcXQnGkoZ4yz+M0XYb88q0XX
1nykgCHxmmKfVKNyAGsRjoFfJilwdvIFdKRLfd9ckJ618vUfOHj0X5RA53eZHJPX
C0OwEFlqDIoN9Vkz1wlAWZLlX/0iPfFx5ztJa2Kg2fQP
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net