Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60e56074-ddab-4ffc-a1d4-b7fd9edbfc5e.roa
File: 60e56074-ddab-4ffc-a1d4-b7fd9edbfc5e.roa (raw, json)
Hash identifier: abE8KOBU4mIXXALkLoTwMYPJDioTWrGbkP5ZrwjfHSE=
Subject key identifier: 6B:D4:B0:3E:22:DD:FA:44:97:53:EB:72:BE:1D:A6:91:F3:C6:F5:5D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0132A61E99EC2A816B7D11954D84FA987042B7CC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60e56074-ddab-4ffc-a1d4-b7fd9edbfc5e.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.118.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:32:a6:1e:99:ec:2a:81:6b:7d:11:95:4d:84:fa:98:70:42:b7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=20f4e2aaeb3b55109292b2c2f58f57c6821d2ddb6c56702716e66b1781c61eac, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:35:7d:b8:40:64:e4:92:69:b6:6b:a6:a4:
9b:12:13:7b:99:64:77:97:08:4d:2f:52:a1:2e:8d:
38:9d:a1:29:53:7d:d2:f1:83:c3:cb:67:25:1d:4f:
8f:15:1e:54:a7:af:04:f1:72:7a:92:5f:e8:e6:3f:
fe:d7:e1:6e:e0:58:6e:b3:54:b5:01:fe:1e:60:be:
dd:2e:54:b0:ec:81:73:e7:6b:94:38:1b:a4:35:95:
f2:f9:90:60:1f:62:df:1c:21:59:7f:1e:3e:05:5f:
ff:40:94:48:47:cb:d8:60:25:bb:06:ba:19:93:e4:
ef:91:f2:2d:2f:f9:bf:18:be:96:d9:c4:12:ce:26:
f5:0f:d1:30:47:5d:6e:87:51:63:f8:9f:f1:6a:b0:
66:8f:20:a7:f8:9f:cb:62:e8:27:69:9b:47:9a:5e:
33:e1:19:b9:9a:56:43:d1:0c:c7:e1:8c:f5:2d:58:
4a:7a:59:10:25:54:a6:1c:4c:d7:7f:00:ba:28:33:
65:f6:15:fb:f6:04:30:c6:02:4d:39:21:5b:3c:fd:
05:c4:56:8a:9b:4f:97:2a:f7:de:62:8d:c3:79:01:
14:02:ce:83:2e:5c:bb:2f:f2:55:e5:60:a6:4d:b7:
ac:84:15:3f:5c:ef:7d:1d:8e:d1:d7:e3:70:68:2c:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:B0:3E:22:DD:FA:44:97:53:EB:72:BE:1D:A6:91:F3:C6:F5:5D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60e56074-ddab-4ffc-a1d4-b7fd9edbfc5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1e:7a:b2:1c:f5:e1:ff:57:b1:43:25:e5:7e:8f:e9:dc:fc:f5:
71:27:ab:23:8b:46:6e:61:f1:3c:74:bd:1e:d9:5a:18:10:f5:
3f:ab:00:44:50:ad:f2:91:0e:52:3a:cd:23:8d:38:16:77:64:
43:d7:30:da:d0:c0:98:4b:e7:b1:68:7e:17:49:78:2a:d8:57:
d6:4f:55:31:28:f9:5c:a9:53:a0:46:5b:84:fe:82:c6:eb:c7:
c8:87:50:df:43:f3:25:08:38:f8:63:9d:1f:96:63:73:5a:de:
50:4e:b1:6f:6c:e1:c1:66:98:45:cf:ff:7f:d2:d3:64:d8:21:
25:3f:75:28:9c:91:fe:9b:20:31:41:19:15:f8:5c:66:93:26:
4e:26:be:04:de:74:67:cd:42:6e:e6:b1:cc:e5:cd:b7:e6:86:
e6:c7:32:1a:46:fa:d5:95:be:57:f7:4d:63:5e:73:63:0a:8f:
69:c3:64:bc:11:b0:1e:71:19:6a:81:34:a3:30:28:c1:f2:12:
c0:34:e2:fb:d4:ff:a5:70:6e:43:cd:45:97:2a:13:25:57:19:
84:4a:98:ae:08:69:d9:f3:fa:f0:85:25:52:e5:9e:1a:7e:ae:
79:47:ca:79:94:a8:d0:34:c1:47:05:fa:f9:01:33:fa:4d:c2:
fd:bf:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net