Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5e32ec83-e02b-4454-b463-f3fd39e9df64.roa
File: 5e32ec83-e02b-4454-b463-f3fd39e9df64.roa (raw, json)
Hash identifier: RNwHxw57eSgpDxFLWKnRLsC2VcvTNZ7P7zenif/FyqM=
Subject key identifier: A3:36:FA:CF:84:D5:DA:2F:6A:75:1B:A9:B0:6F:42:B8:C0:09:E5:00
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E679D6AA01F5A7033FE420F03FC864AE16DB582
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5e32ec83-e02b-4454-b463-f3fd39e9df64.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:67:9d:6a:a0:1f:5a:70:33:fe:42:0f:03:fc:86:4a:e1:6d:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=cf1f50e60447f12aef7236cb286d5afd8d2e23cc8d495fd6fa6d83a3ecdbc7dc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:cd:db:2d:56:4c:d0:6b:a4:68:2e:a2:12:
e3:83:08:ad:40:64:fd:0a:45:a5:4a:9f:5c:b2:09:
16:73:94:0a:a4:ed:01:87:40:cf:5d:db:6e:17:0c:
bd:e0:39:e9:11:56:1a:8a:43:b0:10:5a:35:9d:26:
b9:42:4c:f9:47:05:b9:61:c9:cd:74:a1:ce:0d:ee:
e9:01:5a:60:69:54:85:8c:54:12:03:a1:3c:2a:29:
ef:74:df:f7:26:c8:9a:fa:e7:a6:e3:e8:38:af:a9:
b5:88:69:4c:1b:f2:92:6f:3e:c2:61:64:b2:ed:82:
d3:cb:09:1a:07:6c:58:3c:9c:5b:ff:2b:d5:0b:1c:
41:44:79:23:c3:08:43:9a:b7:7c:b3:3b:44:b5:76:
e4:59:e8:12:52:9a:44:71:22:d9:b1:14:d1:ec:5c:
96:cc:b3:89:dd:65:a1:22:31:29:b6:0b:a4:b4:17:
b2:83:51:75:9d:dd:f1:65:cb:b1:3a:ac:4a:b7:ea:
3b:e8:71:bf:30:d1:51:fc:b5:eb:72:44:86:ff:e8:
f7:45:ca:e4:67:8e:7b:a5:94:73:a3:5e:3e:b2:0f:
77:ee:ce:7e:9b:ea:90:8d:a5:03:aa:ce:30:e2:5a:
79:56:71:d2:27:a7:f5:51:50:f7:89:c9:8e:9a:19:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:36:FA:CF:84:D5:DA:2F:6A:75:1B:A9:B0:6F:42:B8:C0:09:E5:00
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5e32ec83-e02b-4454-b463-f3fd39e9df64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
cc:f9:eb:36:f3:01:7a:37:0d:ff:8f:70:36:2e:b4:e6:9c:17:
fa:4c:d5:12:c7:12:9a:9c:8a:f5:fb:76:05:10:d6:41:03:1e:
d8:83:88:58:8d:34:43:5e:91:11:f8:a2:d3:7b:2d:14:db:66:
e6:1e:88:64:ca:38:12:c9:69:ea:b3:ba:53:86:8c:64:14:5c:
12:01:99:79:d9:b6:96:f6:b7:7a:87:d7:34:9a:86:6b:fb:2d:
f9:6e:1a:54:87:8a:e1:63:79:31:30:f0:2d:9e:1c:46:09:f5:
1c:d5:62:be:0b:fd:62:3a:17:70:b5:13:6f:f1:5e:3c:a1:ac:
a2:72:83:87:11:08:0d:a0:f8:b5:95:85:5a:80:a4:6a:61:af:
ef:30:0b:69:8e:bf:81:fc:c5:a8:12:4d:d8:b3:c6:a2:d4:82:
49:ef:fc:7a:5f:da:79:4a:f3:f2:38:22:4c:cc:43:a3:c9:10:
8b:ce:4a:da:f9:16:6c:04:b6:48:72:30:06:35:00:c8:5c:2a:
85:bf:24:2c:eb:14:13:97:4d:6a:41:ef:61:ba:bf:bc:cf:6c:
57:1f:07:60:1a:49:5b:ad:f3:2e:ea:3a:30:35:45:b8:bb:15:
09:e0:53:ae:e9:44:3c:ae:16:59:71:49:77:97:c2:cc:f0:5f:
43:58:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net