Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
File: 5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa (raw, json)
Hash identifier: 5lNqApxuk2yp39EyjO9ZP8d8ExYxrjdWoK0PUgDOcXc=
Subject key identifier: 39:71:E9:D6:57:1C:76:D5:53:BA:93:6C:D1:FB:D5:B3:E7:4A:CA:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F16394AFB3FBA715F30685198AF86ADA74A15A2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:16:39:4a:fb:3f:ba:71:5f:30:68:51:98:af:86:ad:a7:4a:15:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6c19ec66b51d1bd81a35a77779618655a7e866057ea95977ce9ebd7a759afb48, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:20:55:96:b8:a1:d5:83:f7:25:ae:1b:f9:
6e:6a:c8:12:42:53:cc:00:d0:8d:2f:ec:ec:77:77:
21:a9:04:11:ee:5e:ed:5d:de:e8:8b:fe:7d:12:5b:
6f:0c:82:e3:85:8c:20:1f:02:94:d6:30:a5:ff:9e:
12:3f:f1:d2:f8:57:e6:2d:40:1d:0f:2c:c4:fb:77:
69:26:56:0a:82:f0:49:ca:71:43:35:00:9a:72:c9:
d1:bf:43:88:f2:fc:46:82:db:31:23:a1:a1:3a:f0:
ca:c5:f0:cf:33:70:b6:b4:77:f4:a4:d6:7c:63:8f:
e5:9c:af:e0:7a:81:aa:63:52:47:52:bd:50:9d:07:
50:df:7c:b7:d2:dc:a9:3a:0c:df:6f:b3:b8:ea:2a:
5f:02:3d:72:30:db:5c:61:54:a7:b7:a4:7f:b2:96:
9f:58:18:78:d8:1d:d9:04:5d:b2:fa:13:00:b2:a8:
28:d6:20:9a:d2:27:d4:b2:cd:32:23:25:90:55:02:
c4:f4:f3:ff:7e:e7:d8:47:c4:5d:ae:04:24:1e:4c:
82:12:1a:ba:80:12:6b:fc:2a:83:96:00:ab:49:b7:
5a:30:3f:44:f4:f6:d7:84:ce:b6:64:ab:ce:93:38:
89:12:e9:85:da:bd:00:2b:b7:07:d1:2f:c3:fe:5c:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:E9:D6:57:1C:76:D5:53:BA:93:6C:D1:FB:D5:B3:E7:4A:CA:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5c17e39c-5c0a-4f3f-bb8a-f35a3631a185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:52:dc:4b:8d:df:9f:66:6e:67:28:e5:a5:e3:a8:3f:c1:1f:
42:6a:20:93:ac:ca:d2:07:b4:c6:e5:e4:ba:c4:31:6e:20:ad:
7e:6d:bb:a3:da:5c:aa:09:89:fe:2d:0a:e2:af:d0:bd:d8:a5:
de:89:53:bf:37:15:82:54:08:41:92:6f:15:53:a2:75:65:9f:
5a:fa:fc:16:3f:af:e1:fd:42:f9:c2:7d:74:d1:ea:a5:e0:cc:
5a:5c:cd:82:27:d6:bc:aa:3e:67:b6:51:e4:19:17:3b:6f:c6:
6f:ea:c1:ce:32:53:f2:d0:00:83:a0:07:43:dd:69:1b:72:a1:
ca:0b:8b:58:27:98:94:68:22:76:05:ac:25:da:49:31:2d:df:
de:8e:38:ef:f2:9c:47:0a:c7:34:1e:10:58:57:bc:8b:0e:7b:
51:36:eb:b6:35:cc:dd:d5:09:95:e6:a6:2b:53:a9:a3:75:84:
1f:97:26:5e:50:f3:3d:03:98:d8:d4:1b:55:89:7a:82:0b:a0:
85:5a:e8:08:6d:c3:53:5c:a9:48:e1:22:e0:f9:ae:a5:9b:1d:
28:34:f1:14:80:42:94:fb:f0:01:09:15:f5:67:bf:56:4a:33:
22:e4:87:3f:d3:97:09:dd:e1:17:dd:4c:e1:f0:2f:71:96:24:
26:b3:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net