Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b8f6f39-f637-434c-84f1-a8371e897703.roa
File: 6b8f6f39-f637-434c-84f1-a8371e897703.roa (raw, json)
Hash identifier: 2+N1TQawPdY7d63kfwdrpsOGgCU9kBlJCY+YsJ/Jw4s=
Subject key identifier: 7F:67:F1:A6:BB:9F:A7:C3:4B:5B:6E:C8:22:BA:7B:49:3C:43:46:B0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7A6C3F2DA8AFA04A183E4D762B3BACD6046F5868
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b8f6f39-f637-434c-84f1-a8371e897703.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6c:3f:2d:a8:af:a0:4a:18:3e:4d:76:2b:3b:ac:d6:04:6f:58:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=aa494284124c607c02493ffe324d9bec565a2a64e53c7ef4e06ce16f974ffd90, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:10:d4:98:22:54:fe:f5:03:f2:0f:48:6c:
57:d5:6c:57:2c:68:f1:8b:41:c6:f3:2b:d6:e7:18:
d9:a9:8b:17:47:78:27:65:5e:7b:cf:1c:2b:75:70:
31:52:91:00:4e:7b:a4:80:25:43:75:a9:61:c5:9f:
a0:07:b4:02:a9:d6:a2:6e:a9:3d:7f:01:78:92:87:
c7:ab:3b:1b:b8:fa:aa:79:24:f6:b8:25:de:37:26:
97:81:d7:cb:d0:65:85:87:94:9f:92:f0:fe:4d:94:
f8:85:a4:48:7d:e1:2b:7b:d5:23:17:4d:7b:51:50:
26:9d:b9:9e:64:d1:ed:fd:8d:88:3d:ae:44:de:89:
4b:b7:ff:20:93:c4:5a:de:ed:85:8a:4c:10:0c:64:
8c:28:4c:85:84:9e:0c:74:22:31:26:57:35:17:ad:
e8:90:74:0c:15:69:d6:d8:00:26:dd:8e:bb:ec:21:
90:0f:c6:b5:42:e6:bf:e6:2a:e9:86:b8:7a:08:20:
33:55:31:c2:f6:3c:fd:ff:19:82:d0:b3:91:23:6d:
c0:20:5f:37:9c:d5:c7:b8:23:89:7d:d1:b9:be:fd:
c0:8e:18:61:7d:75:05:45:a2:82:4d:70:e2:b1:d1:
15:47:2b:ad:b2:63:cb:9f:48:99:57:0f:b5:f1:c7:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:F1:A6:BB:9F:A7:C3:4B:5B:6E:C8:22:BA:7B:49:3C:43:46:B0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6b8f6f39-f637-434c-84f1-a8371e897703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:18:64:c2:4a:8a:c0:43:10:fc:ae:87:a6:b9:a6:43:a3:96:
e5:b7:b6:f5:2b:c1:77:1c:59:82:d1:5b:e3:f3:dc:e3:8a:1d:
3a:9f:f4:0d:89:3e:92:ca:72:0a:af:ad:ca:41:96:82:38:c4:
f2:9c:80:65:aa:cc:bf:e8:2a:63:af:d8:52:c7:8e:86:93:9e:
39:99:c1:6f:4c:bc:17:c9:33:3d:4e:e4:3b:a4:63:7e:81:4f:
e8:46:0b:7e:1c:23:23:f5:18:06:9a:cc:20:34:41:a9:b9:0f:
fb:ea:39:86:a0:67:ae:5d:eb:f1:1f:bb:f7:72:dd:7c:f2:b2:
8d:01:1b:d5:85:c4:b1:95:e9:64:fa:6f:56:1f:f7:bb:10:bc:
f4:b1:55:03:20:c4:8e:ca:e3:5f:68:56:f0:31:9d:ec:00:ca:
e6:3e:a1:5b:61:5c:49:1a:16:7b:60:c3:6f:1f:4b:4f:ee:27:
92:fb:82:86:8e:78:f7:79:7e:98:cf:7c:c1:d3:30:40:9c:5e:
00:53:61:d4:72:c1:90:ab:28:02:ff:89:68:95:e3:a9:f2:5c:
0e:36:23:08:07:0f:38:bf:c3:1a:f4:32:e6:24:dc:9c:a9:19:
9f:c8:9c:5c:f5:21:90:45:e8:8e:85:6b:f9:66:97:82:68:63:
3d:89:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net