Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6be51680-57c7-4d1d-ba12-3da6cbabf591.roa
File: 6be51680-57c7-4d1d-ba12-3da6cbabf591.roa (raw, json)
Hash identifier: SWkdSEA9fN0sT/4mZzB74PbvSMvc/OnDdsFpZez+anc=
Subject key identifier: A1:FA:6C:00:DC:F4:09:FB:6F:81:8C:DD:9E:FC:9E:CA:CD:F0:28:7B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57FAF488F2A2A5FEBC3BD48CF3CF7FE0343F2DCD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6be51680-57c7-4d1d-ba12-3da6cbabf591.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fa:f4:88:f2:a2:a5:fe:bc:3b:d4:8c:f3:cf:7f:e0:34:3f:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=72db767045748caec8c6112cab637360b7273c9b21819a387e85798d7690ba34, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:e4:2b:7b:ea:f3:76:4b:ec:a5:d4:64:8b:
8b:36:88:01:ed:20:48:16:5a:80:f3:d5:5a:ed:7a:
99:f6:7e:d3:3e:7b:f6:72:92:2e:b5:f5:76:64:9e:
e4:a6:85:7e:a4:ea:2e:2e:c3:c7:77:b9:6a:05:93:
f4:66:e3:ef:45:e7:21:6f:20:94:1f:25:2e:0f:87:
e9:e2:e9:26:d1:0e:54:c4:04:92:6f:6f:ab:10:ad:
5c:09:e2:bb:79:3b:fc:d3:f9:91:43:38:96:4f:ed:
a5:1a:7f:4a:09:86:30:67:0d:fb:bb:03:46:34:00:
42:16:28:55:09:44:12:ec:e9:18:84:8b:b2:58:f4:
bf:5b:3f:f8:49:13:b5:e2:79:a0:53:3a:e7:56:ee:
98:0f:2e:e3:d1:01:e0:f8:a8:1e:60:b3:c5:5b:6c:
f2:81:13:c5:4e:23:08:52:0f:8e:2f:50:06:f5:68:
5c:47:77:07:35:f6:ef:77:98:a8:20:7f:52:88:16:
d7:85:cb:b4:c8:17:18:90:79:09:f4:47:b7:ee:66:
30:b0:b2:a4:b1:c9:83:2c:c0:b8:92:3e:c8:00:37:
f5:eb:63:af:83:f1:56:61:48:7c:29:fe:b8:87:ef:
5e:f3:ed:e6:fb:20:7b:a6:bd:fd:01:c9:f5:7d:88:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:6C:00:DC:F4:09:FB:6F:81:8C:DD:9E:FC:9E:CA:CD:F0:28:7B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6be51680-57c7-4d1d-ba12-3da6cbabf591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:9e:2b:06:25:fb:d0:9a:53:b2:27:fc:03:77:be:46:bd:a0:
bf:ae:cb:ec:c9:1b:e1:98:1f:0b:47:25:3c:41:aa:ba:30:76:
65:a2:16:e1:ac:fa:82:68:43:31:ae:72:63:f5:e4:47:7b:d4:
2f:7e:da:69:24:de:12:66:fe:7a:0f:df:16:50:e6:bc:0d:3c:
eb:1b:ad:11:de:c6:5d:d3:e0:a6:50:c3:d4:dd:a5:68:49:38:
a3:f1:70:6f:07:3b:e4:3b:99:85:33:f9:a7:aa:0c:8b:67:dd:
39:25:fa:49:d1:d2:c4:52:a4:52:e7:b3:36:06:ce:07:af:36:
7a:1d:d1:f3:11:6c:8d:b9:3c:21:8d:2c:de:a0:6c:fb:b2:a1:
ce:9b:87:b5:30:18:09:a1:8d:31:3d:4d:22:fe:40:0e:65:df:
e0:27:fa:a3:0a:a6:30:73:36:5e:f6:b3:55:9e:16:09:50:b8:
23:a7:b3:4e:d6:09:c3:d8:44:15:fb:74:32:8f:83:c8:53:5a:
5c:25:dd:9d:39:3c:e4:4a:c5:e5:74:5d:3d:3a:34:d5:6b:d0:
03:7f:27:a3:af:a7:3f:fc:b8:93:04:4f:75:0f:b3:97:e7:7c:
a2:63:9a:68:5a:65:ce:3f:f2:ef:ba:1f:c7:b0:e9:e7:f7:e7:
c0:30:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net