Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5def5ced-6390-4a74-8bf9-cb677f0b05fc.roa
File: 5def5ced-6390-4a74-8bf9-cb677f0b05fc.roa (raw, json)
Hash identifier: XyogqKY8Tloaex/x9/nGyU2NK8nCQ+iiPf6CyXoV8fU=
Subject key identifier: 8D:D0:3B:D9:07:0E:EB:CB:8B:02:D5:0E:A6:2E:DF:66:B6:6D:39:59
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 318E335C508EA18A37C80C51ED9D3FEAFD17E8E2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5def5ced-6390-4a74-8bf9-cb677f0b05fc.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.82.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8e:33:5c:50:8e:a1:8a:37:c8:0c:51:ed:9d:3f:ea:fd:17:e8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=073198f75b59f3d91bb6619b80d50292e59d88c17f4bd15e21cb418f6995d426, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:67:ed:6e:32:59:6b:03:da:35:60:e9:c6:
44:fe:9e:f8:d9:10:d2:56:4f:bc:dc:67:51:98:0e:
19:e5:f1:62:e1:b4:aa:1c:9e:e1:75:e8:66:36:f1:
4a:92:b2:b9:4a:04:94:80:b1:3a:5a:d8:8f:54:82:
1e:33:44:f2:9b:91:b0:fc:6d:9c:92:35:12:a3:aa:
5e:1b:c9:4a:cf:b0:1e:bd:de:75:18:a2:2b:9a:51:
55:f2:fd:be:3b:1a:b3:66:de:0e:08:2a:93:a6:bb:
b6:09:4f:3e:e2:79:64:9d:15:be:47:e7:0a:a8:07:
e3:57:ad:1d:ef:12:28:47:8c:33:d5:3d:89:ff:6e:
c9:98:9c:f8:7c:1b:f7:3c:80:2a:f4:0d:f8:6b:83:
5d:81:73:de:f8:97:8f:42:80:18:01:f8:d7:42:87:
64:f7:4c:53:34:c3:6c:9f:ee:40:6c:44:82:44:db:
11:00:fa:65:e1:ce:0c:00:97:eb:4b:bf:58:3d:f6:
12:21:81:a3:c4:6a:a7:14:dc:e1:87:da:f6:86:da:
de:45:bf:b8:e9:0e:f6:0d:71:4c:d5:0b:15:15:96:
f6:d0:bd:41:c7:80:1b:8a:3e:b6:85:c1:f2:ed:7d:
46:60:77:aa:0e:91:a5:fc:c2:55:56:57:d7:1d:8a:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:3B:D9:07:0E:EB:CB:8B:02:D5:0E:A6:2E:DF:66:B6:6D:39:59
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5def5ced-6390-4a74-8bf9-cb677f0b05fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:13:89:1e:e3:16:77:da:4a:f7:1f:ef:87:5c:76:ed:9b:e2:
4c:81:77:28:66:ba:7d:12:25:0e:5c:80:dc:33:14:66:a8:7a:
88:c3:60:50:13:f4:1b:20:a2:8b:14:3b:f6:1b:93:0a:2f:9a:
ca:b4:74:a7:b7:2d:9e:4d:1b:87:a0:3e:72:4c:67:1d:c0:dc:
9b:6e:21:92:81:db:d9:20:50:6b:81:7d:5c:b0:6e:98:3f:26:
bf:83:40:2c:65:05:72:1d:d2:97:a5:fe:63:0f:9b:57:28:bb:
57:d2:29:31:91:c6:7d:58:ab:95:c2:62:1a:f8:9b:3b:0a:7f:
d2:1f:cd:13:fa:a3:66:69:3d:e5:b8:3e:10:b9:eb:62:4e:64:
f1:50:b4:c4:95:2d:1b:06:ac:94:6a:76:a7:9a:a7:6d:4c:60:
bd:c8:48:32:80:5d:87:88:db:ec:67:38:4d:d5:4f:c0:c1:c4:
79:0f:7a:77:de:61:84:62:01:5b:db:fc:75:5f:bc:0d:12:51:
5b:7a:35:1d:9d:fe:a8:95:b6:e5:98:77:d1:1c:02:40:d0:fb:
f6:71:b0:10:0f:4b:1b:6c:da:0f:64:d8:b7:88:7e:96:28:a3:
13:0c:ec:a8:5a:5b:df:c7:aa:66:6e:63:18:81:d5:70:c5:4f:
9f:9f:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net