Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/64347f36-e1a1-4726-8ba2-f1a09daab7d1.roa
File: 64347f36-e1a1-4726-8ba2-f1a09daab7d1.roa (raw, json)
Hash identifier: bgA6mKA8eHV8fc7auScxlkI60ssGErLuvxnRtD4lc7A=
Subject key identifier: 7B:71:03:BA:10:F2:B3:05:8F:05:7D:8A:A0:AE:37:46:CC:AF:49:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3CCD1F372936AD3EB0ECEE50A53CBA38A97358C9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/64347f36-e1a1-4726-8ba2-f1a09daab7d1.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.200.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cd:1f:37:29:36:ad:3e:b0:ec:ee:50:a5:3c:ba:38:a9:73:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=f280aac78b3e85caee40404a3396057cb1d835502362d08177939e934b227b85, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:f1:ea:cb:34:30:2d:ee:17:c5:55:bf:8c:
36:98:30:dc:e1:9b:4c:9d:d9:4b:b6:2a:48:55:01:
76:2c:77:37:5f:97:69:fa:a0:b3:7f:4e:84:c4:9f:
c7:d9:77:f1:01:ce:17:c1:a6:99:b7:14:c2:fb:d5:
0c:8f:5a:0c:a5:64:f1:62:66:c8:fb:99:d6:ea:92:
15:72:f2:83:85:82:33:af:80:b2:c4:89:e5:1f:d7:
a4:04:52:84:a5:ca:81:80:cd:68:7d:9f:1d:52:36:
2f:91:39:01:c3:f9:7a:2f:ab:69:58:b0:74:f9:c1:
ac:0e:7c:a0:b4:53:eb:35:2a:bf:6a:49:85:99:fe:
78:23:70:4e:be:b7:1c:c7:6d:1a:ad:e2:c5:87:69:
a4:27:50:45:18:81:af:43:f9:3d:bc:7a:60:b1:e7:
a2:d6:21:57:80:e0:b9:84:f8:29:95:cb:fb:8e:5f:
2f:01:4c:ad:e7:ca:a5:7a:6a:65:8c:59:b6:1a:cf:
35:8e:ef:10:c1:b4:38:42:5c:5a:de:65:97:e3:11:
b2:ee:22:49:a7:e9:d0:15:72:9e:2c:1a:3d:52:66:
69:eb:92:06:f3:11:41:5f:97:92:0c:b1:8d:22:31:
e6:43:ab:3b:cc:3c:0f:d1:99:7a:5b:ae:60:65:fc:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:03:BA:10:F2:B3:05:8F:05:7D:8A:A0:AE:37:46:CC:AF:49:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/64347f36-e1a1-4726-8ba2-f1a09daab7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/15
Signature Algorithm: sha256WithRSAEncryption
85:6a:7c:a1:85:c9:92:3d:ae:29:2b:4b:34:71:db:ac:46:5d:
ac:de:a2:16:7d:4d:04:33:02:0a:12:db:1b:76:c7:94:66:20:
60:2d:c4:0b:60:e5:49:0f:e3:94:c0:c8:dd:ec:ee:98:17:07:
7f:4d:d7:03:00:dd:42:74:d9:2f:cc:df:f1:67:15:f6:13:9b:
17:99:b1:f5:4f:fe:be:28:ed:e5:63:f3:53:71:c9:9e:25:22:
ed:38:f5:31:38:10:3c:7c:a1:6f:97:a1:7d:52:db:25:91:92:
54:10:a1:72:d0:4d:a4:f8:a7:b2:41:ee:4c:2c:2e:2d:fe:3e:
5e:3f:b2:a0:e7:4d:ba:87:5c:46:7b:24:57:8e:4e:db:d6:d3:
3f:b2:46:d1:07:eb:6a:e5:7e:14:fa:8a:6c:ee:32:3b:6e:a5:
79:25:5d:80:e6:ca:a1:2d:2f:57:e6:33:01:b4:b4:8b:2d:11:
56:54:73:c9:60:c8:11:13:e6:6f:65:dc:e3:9c:97:7f:53:79:
8b:ce:8a:57:10:c2:94:4e:9f:9f:13:50:07:f0:8e:85:d3:0b:
10:45:fb:37:d5:fe:ee:85:c5:11:19:7a:84:d9:00:ee:7b:71:
cc:0c:14:7c:54:67:53:4b:e8:0a:82:dd:49:aa:88:c9:7f:40:
21:fc:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net