Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
File: 6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa (raw, json)
Hash identifier: deLYtjIYGNSQeKc1260h4bsSSLRVULPcuZpYKVmyCWA=
Subject key identifier: 06:FB:FF:1A:5E:50:BD:A1:B2:A1:98:6C:01:10:3C:F8:D9:08:5A:C9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 04EA3E82AF6B017C808ECCB85FC3D0BFBFD56E54
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 185.143.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ea:3e:82:af:6b:01:7c:80:8e:cc:b8:5f:c3:d0:bf:bf:d5:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=d2dd1f5ce748c6f6781d23ffb82c5e4589c4b58e11f819dc2a53a59f5cf61c70, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:17:b0:df:f3:62:38:c2:d8:e5:9a:58:63:
08:0c:a8:be:3c:b9:ae:e1:2e:a2:84:9f:45:90:ea:
47:57:de:7f:44:6b:04:53:13:9c:ac:a6:c8:9d:2c:
75:e1:9a:93:7d:8b:00:d2:8d:13:fc:00:52:b9:55:
ca:78:1f:bd:19:8b:a8:a6:0f:04:a7:38:02:67:6b:
6d:4e:9a:fc:70:21:70:18:ec:9e:b3:5c:27:1f:82:
28:02:61:39:45:d8:a7:9e:c7:c7:49:27:f6:9e:e7:
fb:c5:24:a5:18:bb:ab:1a:82:ea:04:b0:45:21:b3:
66:af:98:6b:9f:c3:76:bf:4f:c6:33:7d:a7:14:83:
17:51:b6:57:ef:2d:40:ec:c2:72:82:32:9d:8f:48:
97:d9:11:2b:13:4d:69:fc:40:96:0b:8a:ab:43:c4:
4b:ca:43:d6:41:e5:0d:26:e5:ed:d5:66:de:4a:0c:
a7:ba:81:2b:ec:bc:d3:ee:d6:93:42:60:1e:6c:d1:
be:8d:86:11:7a:91:93:b3:33:ee:5d:02:8a:44:c4:
49:57:9b:eb:91:d6:e8:17:2e:a8:d6:02:75:e2:85:
88:0b:9f:b6:45:dc:44:d4:d8:ac:e5:2b:b8:5f:ec:
41:43:6c:a4:89:2d:3f:6a:7d:dc:13:56:33:1e:27:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:FF:1A:5E:50:BD:A1:B2:A1:98:6C:01:10:3C:F8:D9:08:5A:C9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:30:ea:38:70:01:a4:37:10:51:e4:f2:a6:60:79:e2:0e:f7:
f9:82:3a:54:89:e8:63:1f:67:76:0b:c4:e1:54:ab:14:44:54:
c2:7e:35:fe:a5:28:8c:97:9e:b1:40:e4:56:4b:fc:aa:40:78:
0e:5a:bf:cd:d8:6f:88:8d:d8:ef:7c:20:22:bb:46:4c:35:74:
88:c0:74:0e:64:52:d9:bc:4f:70:41:78:f7:41:79:99:84:2d:
bb:89:24:15:74:72:b0:30:91:1b:b0:62:40:25:b6:7e:53:9d:
8e:98:8e:a0:40:e0:dc:aa:47:17:95:ca:53:d7:bf:4d:cd:c8:
04:4d:e9:6e:79:94:a8:f5:f0:e0:7a:0b:ce:38:e5:6d:90:f7:
4d:f0:c8:f2:81:f2:f3:9a:96:30:e6:da:28:26:29:ca:a4:b2:
df:c5:8a:05:f5:46:ef:55:27:d8:5b:ce:9d:68:a4:15:f8:db:
f4:3f:29:3b:93:29:57:24:38:d2:82:17:70:fd:3d:46:9e:ba:
f5:e4:28:96:7f:ab:71:4a:40:1a:9a:cb:23:8a:60:c4:2b:16:
51:a7:f9:2c:49:09:40:8f:c9:9c:97:72:e6:f7:68:73:40:0a:
90:76:8a:b4:0c:06:e7:ee:c2:ff:b4:42:63:08:6c:f3:fe:de:
1f:4d:cd:29
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBOo+gq9rAXyAjsy4X8PQv7/VblQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMDgwMDAwMDBaFw0yNDEyMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGQyZGQxZjVjZTc0OGM2ZjY3ODFkMjNmZmI4MmM1ZTQ1ODljNGI1OGUxMWY4
MTlkYzJhNTNhNTlmNWNmNjFjNzAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMvMF7Df82I4wtjlmlhjCAyovjy5ruEuooSfRZDqR1fef0RrBFMTnKymyJ0s
deGak32LANKNE/wAUrlVyngfvRmLqKYPBKc4AmdrbU6a/HAhcBjsnrNcJx+CKAJh
OUXYp57Hx0kn9p7n+8UkpRi7qxqC6gSwRSGzZq+Ya5/Ddr9PxjN9pxSDF1G2V+8t
QOzCcoIynY9Il9kRKxNNafxAlguKq0PES8pD1kHlDSbl7dVm3koMp7qBK+y80+7W
k0JgHmzRvo2GEXqRk7Mz7l0CikTESVeb65HW6BcuqNYCdeKFiAuftkXcRNTYrOUr
uF/sQUNspIktP2p93BNWMx4nNq8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQG+/8a
XlC9obKhmGwBEDz42QhayTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NmM4NWVmZjctMWQ1Ni00ODg5LWFhM2YtMWQwMzVjZDhlNTE3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmPEDAN
BgkqhkiG9w0BAQsFAAOCAQEATjDqOHABpDcQUeTypmB54g73+YI6VInoYx9ndgvE
4VSrFERUwn41/qUojJeesUDkVkv8qkB4Dlq/zdhviI3Y73wgIrtGTDV0iMB0DmRS
2bxPcEF490F5mYQtu4kkFXRysDCRG7BiQCW2flOdjpiOoEDg3KpHF5XKU9e/Tc3I
BE3pbnmUqPXw4HoLzjjlbZD3TfDI8oHy85qWMObaKCYpyqSy38WKBfVG71Un2FvO
nWikFfjb9D8pO5MpVyQ40oIXcP09Rp669eQoln+rcUpAGprLI4pgxCsWUaf5LEkJ
QI/JnJdy5vdoc0AKkHaKtAwG5+7C/7RCYwhs8/7eH03NKQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:39 2024 by rpki-client on console.sobornost.net