Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
File: 6b1fedd3-188f-4b29-88bb-0dce33df2464.roa (raw, json)
Hash identifier: tEOog2OtS1LRB3vg8Gsy9mByP1Wg0bjVu82FGrdD92g=
Subject key identifier: 88:37:0B:11:A9:95:02:E1:BA:08:E5:4E:FC:6A:5F:4E:7F:6C:27:5C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 34FA1CA62D9F7D7ACC650299B3AED337569895BF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fa:1c:a6:2d:9f:7d:7a:cc:65:02:99:b3:ae:d3:37:56:98:95:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6e538911cf627e3bb7ce95e48a56d1a36f8287fbdbf15eedd2eb7237f7e44cd8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:5c:a8:70:ad:bb:0f:25:b8:d2:6b:a5:71:
e3:cf:17:0e:7c:43:ed:9b:a8:92:96:08:3e:5a:e8:
10:69:c4:c4:7f:96:0f:1a:d2:6e:cf:7d:e6:4c:e8:
6f:21:79:73:9d:6c:e9:e8:4c:ea:f8:1a:6e:2b:62:
59:32:51:a7:cf:25:65:f4:b0:18:b9:e1:4d:1d:92:
ef:0a:00:7a:69:2d:9a:19:71:35:49:87:eb:7c:a2:
ce:21:5b:77:a5:e6:4d:76:7a:51:7e:77:dc:3a:3b:
19:77:6d:3c:ac:3c:bc:81:ef:63:b7:b7:64:34:23:
74:c8:e2:35:69:a9:93:4b:52:2f:42:6e:88:92:18:
b1:1c:8d:28:3d:0a:9b:a6:12:66:9c:7b:75:41:94:
47:48:78:e5:1e:63:51:5b:f9:33:98:ec:bf:d0:21:
f0:06:8e:f8:66:b6:d3:11:fa:5e:b1:39:a8:e7:26:
14:c6:6e:2a:93:18:7e:28:d6:98:5d:f1:9d:8c:6d:
03:91:dc:c2:69:5e:c2:6d:f1:63:94:3f:56:3b:7c:
e1:1b:76:46:c9:cc:28:b5:dd:20:6c:55:9e:3a:12:
4f:8b:99:74:a8:7e:24:4a:aa:eb:c0:36:cd:34:b9:
77:27:a1:d6:cc:4c:3f:43:5d:4a:82:4d:36:8e:73:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:0B:11:A9:95:02:E1:BA:08:E5:4E:FC:6A:5F:4E:7F:6C:27:5C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b1fedd3-188f-4b29-88bb-0dce33df2464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:32:34:61:6e:1a:f9:9a:3d:6f:f9:f1:a4:9f:8f:d9:e9:59:
7b:aa:29:a9:d2:56:71:59:66:99:b3:d6:ca:65:ca:93:91:09:
4a:83:a7:48:d8:52:21:32:6a:7d:f4:f8:f7:60:59:6d:fa:20:
f1:8d:b2:46:df:5a:f1:2f:8b:11:78:c9:9f:f7:a9:18:81:c8:
53:17:e6:01:a3:35:7c:4d:51:5d:e3:5b:6a:89:e8:48:47:ed:
7a:58:15:1a:45:f8:6f:87:b9:c0:07:51:70:76:a5:f5:65:06:
9a:5b:93:32:b6:7c:c3:67:b6:42:22:02:83:4f:2f:3d:3d:e0:
c7:e1:e6:0f:36:d4:ea:f0:12:e1:f2:4a:87:0a:1d:e6:16:bf:
e2:09:60:35:0b:15:29:ef:d1:d1:f9:85:94:fb:5f:0a:73:d9:
e9:4f:9f:f4:60:46:49:37:e8:0b:fd:91:24:c6:24:9e:ac:4f:
4b:5a:18:42:29:61:b6:da:98:1a:50:1f:18:0f:f4:f5:2a:18:
91:51:20:30:fb:87:ed:0c:c2:84:31:c4:6f:2c:bc:7e:1f:99:
a0:e4:3e:3d:45:a3:54:6b:72:5c:8c:be:ec:dd:15:8d:4c:22:
79:1c:49:d8:bb:c8:89:81:27:9e:f6:7e:fb:be:09:29:2a:b3:
3f:97:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net