Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/645140ca-ded9-48d5-91a3-42aec1941dcf.roa
File: 645140ca-ded9-48d5-91a3-42aec1941dcf.roa (raw, json)
Hash identifier: se1Ty/+yvwB7R6IMFmp/f+sZd+WwlaEw6N8JEfhZpZg=
Subject key identifier: 83:17:C5:28:20:6F:17:65:C4:53:D0:CD:8E:50:54:0F:73:55:B6:67
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4FD96A7804FA6AA6116FD4676B03859555896EA6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/645140ca-ded9-48d5-91a3-42aec1941dcf.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d9:6a:78:04:fa:6a:a6:11:6f:d4:67:6b:03:85:95:55:89:6e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=58cd312bebf166a7398b7722bf4df02a558c0c824f31794b2fe28991d529f6b4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:92:3a:f7:25:0f:56:da:cf:76:34:8a:3d:
65:c9:d6:4f:77:57:fb:47:66:20:a6:49:64:45:d4:
a0:52:ae:1b:e7:d7:09:15:2b:d3:f2:97:e8:ca:a2:
e2:ac:1e:e1:3e:cd:ab:15:8d:1a:36:c9:2a:db:30:
41:24:9e:20:9c:d1:36:a5:4d:43:72:bb:f5:59:ce:
a4:13:f8:5b:7d:e8:48:01:a4:5f:7e:10:b2:eb:64:
4c:a8:ab:10:54:43:a6:77:6d:5a:dd:97:ff:5b:42:
b4:13:3c:09:f4:13:69:ee:92:8e:70:a3:62:de:21:
a3:22:13:90:d6:18:83:d9:9c:45:a3:9d:a3:1f:d6:
67:cc:0a:9b:9a:e3:a3:d6:5f:34:89:3b:4e:28:63:
be:f7:54:5f:7e:ea:ac:1d:db:65:30:3e:d8:33:4f:
47:80:51:8b:20:88:43:30:5d:80:c9:e5:ce:6f:c0:
76:b0:3b:0b:aa:0d:ab:b2:8f:64:02:03:c1:18:16:
1b:0b:42:e9:8d:4c:5e:55:a3:86:07:7a:66:45:30:
3d:3e:8c:23:75:22:ea:48:ed:d6:64:c5:c4:a4:5b:
15:f2:22:1d:72:9a:3e:20:c5:5e:84:a6:25:93:df:
06:6f:dc:82:2d:52:5f:de:64:d4:a6:d4:6b:48:93:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:C5:28:20:6F:17:65:C4:53:D0:CD:8E:50:54:0F:73:55:B6:67
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/645140ca-ded9-48d5-91a3-42aec1941dcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c3:73:c0:bb:c5:6a:fd:9e:db:ab:ec:a3:d9:69:8f:1d:3e:b6:
3d:33:d8:46:83:6e:07:2a:59:e8:4f:5f:f6:bc:69:26:96:ba:
d5:1f:36:26:8a:ba:e9:be:9d:c8:e3:5d:8a:00:74:df:6e:5c:
24:b4:b9:03:8c:44:ab:ec:b6:c9:6d:0a:5c:12:dd:70:f3:45:
69:fc:a6:39:22:eb:1d:bd:08:3b:69:1e:41:20:e1:6c:e3:34:
f3:2a:e3:a3:17:ee:d8:14:99:c7:bf:e8:c2:d6:7e:2c:5e:9f:
64:20:46:bd:9c:64:69:7b:6e:de:22:4e:f3:9b:39:39:d0:00:
0b:6e:6c:57:71:fa:f1:f8:65:ca:a6:41:0b:52:b8:af:fe:24:
cc:97:97:9e:3c:85:df:72:14:31:1c:27:a8:1a:14:d6:65:1b:
4d:7c:08:23:d9:85:93:75:8d:3f:32:54:8c:e3:2b:07:41:36:
94:ff:c7:99:5c:a5:1d:86:4a:87:01:e2:cb:98:08:be:43:00:
ed:e1:10:32:06:19:9f:02:a3:7e:df:d0:4f:a0:ba:72:6b:b1:
ae:55:74:48:95:dd:e6:b1:fe:4d:75:61:c7:5b:cc:e2:7e:bf:
31:81:cf:a8:21:f7:fd:13:8e:8b:88:6a:a2:f4:81:36:3a:ce:
cc:dd:59:04
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUT9lqeAT6aqYRb9RnawOFlVWJbqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDMwMDAwMDBaFw0yNTAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDU4Y2QzMTJiZWJmMTY2YTczOThiNzcyMmJmNGRmMDJhNTU4YzBjODI0ZjMx
Nzk0YjJmZTI4OTkxZDUyOWY2YjQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJhHkjr3JQ9W2s92NIo9ZcnWT3dX+0dmIKZJZEXUoFKuG+fXCRUr0/KX6Mqi
4qwe4T7NqxWNGjbJKtswQSSeIJzRNqVNQ3K79VnOpBP4W33oSAGkX34QsutkTKir
EFRDpndtWt2X/1tCtBM8CfQTae6SjnCjYt4hoyITkNYYg9mcRaOdox/WZ8wKm5rj
o9ZfNIk7TihjvvdUX37qrB3bZTA+2DNPR4BRiyCIQzBdgMnlzm/AdrA7C6oNq7KP
ZAIDwRgWGwtC6Y1MXlWjhgd6ZkUwPT6MI3Ui6kjt1mTFxKRbFfIiHXKaPiDFXoSm
JZPfBm/cgi1SX95k1KbUa0iTZdsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSDF8Uo
IG8XZcRT0M2OUFQPc1W2ZzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NjQ1MTQwY2EtZGVkOS00OGQ1LTkxYTMtNDJhZWMxOTQxZGNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATP0MA0G
CSqGSIb3DQEBCwUAA4IBAQDDc8C7xWr9ntur7KPZaY8dPrY9M9hGg24HKlnoT1/2
vGkmlrrVHzYmirrpvp3I412KAHTfblwktLkDjESr7LbJbQpcEt1w80Vp/KY5Iusd
vQg7aR5BIOFs4zTzKuOjF+7YFJnHv+jC1n4sXp9kIEa9nGRpe27eIk7zmzk50AAL
bmxXcfrx+GXKpkELUriv/iTMl5eePIXfchQxHCeoGhTWZRtNfAgj2YWTdY0/MlSM
4ysHQTaU/8eZXKUdhkqHAeLLmAi+QwDt4RAyBhmfAqN+39BPoLpya7GuVXRIld3m
sf5NdWHHW8zifr8xgc+oIff9E46LiGqi9IE2Os7M3VkE
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net