Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5d4ea5a5-410b-4fae-80ca-93590f67d426.roa
File: 5d4ea5a5-410b-4fae-80ca-93590f67d426.roa (raw, json)
Hash identifier: 4kJ7us2xK4DhK2r7m9p9fBKBLbh9Wt7wK+4dNbMVvYA=
Subject key identifier: 33:6E:21:D5:31:20:00:DB:90:18:AB:CF:AF:73:30:0B:B3:8E:38:65
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 078E892BFFA092595F51594697C78B83AB03F98E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5d4ea5a5-410b-4fae-80ca-93590f67d426.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 51.92.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8e:89:2b:ff:a0:92:59:5f:51:59:46:97:c7:8b:83:ab:03:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=365337ad70fd5c41f2d4d22b68cfef975ce6d7706076ae03f2b8f30b88ed5cdc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:cc:6d:24:a4:25:d8:42:c1:11:9a:c0:f6:
f9:b0:c4:d3:83:ba:62:1d:2a:09:bb:65:a2:b4:7c:
6e:a4:2a:6f:63:27:3b:d6:5c:ff:7d:bc:21:d2:58:
b5:28:d2:fb:8c:d7:6f:6e:d6:c6:cd:90:c2:c9:b6:
0b:93:ff:c3:97:d0:be:f4:c0:3a:f4:26:7f:33:46:
11:8e:f6:55:71:ea:bc:c3:e8:52:a1:11:1c:e1:db:
11:fa:14:f5:ce:ac:ac:86:45:0a:44:62:f1:6d:03:
bc:f7:c1:89:25:f2:1a:9a:3a:95:14:bd:52:33:e9:
e1:3a:99:86:cc:d1:c5:f3:49:72:bf:f7:a4:e8:c6:
88:43:4a:f8:b8:0d:11:0a:87:cd:fe:73:e1:b3:40:
8e:34:43:71:e6:dc:a2:2b:ad:e5:a3:09:5d:f2:5a:
c0:d5:42:88:c5:d2:d7:b8:fb:ab:af:f7:de:db:dc:
f4:18:af:55:26:76:06:41:9e:16:71:38:fe:46:60:
44:c9:3e:37:d6:86:3e:ad:2c:fe:3a:80:79:07:fb:
9a:92:c2:a5:11:64:45:4e:c7:ab:4f:1d:b9:1e:7e:
b4:c2:89:d3:55:fb:01:59:3f:0f:19:2e:71:a7:0c:
75:55:71:b1:6b:a4:d2:56:d5:ed:ce:c1:42:99:d2:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:21:D5:31:20:00:DB:90:18:AB:CF:AF:73:30:0B:B3:8E:38:65
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5d4ea5a5-410b-4fae-80ca-93590f67d426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/14
Signature Algorithm: sha256WithRSAEncryption
ca:cf:ce:c1:4e:38:13:f4:79:cb:93:ec:40:cd:32:7d:b1:97:
86:dc:c9:54:d4:40:5d:33:9c:16:d4:bb:c9:4f:34:f1:ee:2b:
fe:1e:c5:44:db:79:69:fa:eb:b7:01:9b:d7:ee:85:33:3f:f4:
ae:15:89:d4:18:1a:4e:3d:fc:a4:9c:88:02:93:9b:96:16:f6:
81:43:39:93:dd:3a:b5:a4:bb:e9:a3:f3:1b:d8:5e:85:a7:f8:
ce:cb:40:60:9e:a2:b2:4b:72:1d:b3:d3:26:54:ac:ff:1d:b3:
ee:99:be:4a:7b:84:66:2c:16:00:3a:b4:82:e0:85:c9:1d:85:
a4:60:95:ba:cb:5c:de:eb:1c:18:7f:a9:4d:48:18:78:03:80:
53:fa:0f:68:86:6e:26:af:2e:0c:e8:6c:46:32:58:23:b9:4c:
8c:65:00:64:2c:0d:25:ae:25:8b:b8:13:24:ab:ee:46:07:5a:
e6:d9:1e:79:c0:32:cd:5b:a6:63:a1:f3:37:db:ca:6f:63:23:
29:8a:1d:a4:27:16:1e:60:92:81:84:ab:82:bf:52:11:89:10:
c6:6d:c4:21:f2:bb:75:48:88:52:7a:7d:5f:10:fe:98:b8:a0:
bb:24:a4:05:b6:de:c9:fb:d6:d4:8e:60:ca:d3:6f:32:9d:06:
0b:ca:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net