Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70f878ce-a193-47ae-b517-318c2b88892f.roa
File: 70f878ce-a193-47ae-b517-318c2b88892f.roa (raw, json)
Hash identifier: BIOjZOBb3P6JkP0ChbLISrsOQxLmzxe80aSglcEVnsk=
Subject key identifier: 72:70:10:58:1D:07:94:AE:48:C4:C0:1D:38:DA:F7:B5:9C:4D:FD:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 496C1BFFC907FDE1F3BF57802AFBCD3885ED959C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70f878ce-a193-47ae-b517-318c2b88892f.roa
Signing time: Mon 04 Nov 2024 00:00:00 +0000
ROA not before: Mon 04 Nov 2024 00:00:00 +0000
ROA not after: Mon 09 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6c:1b:ff:c9:07:fd:e1:f3:bf:57:80:2a:fb:cd:38:85:ed:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 4 00:00:00 2024 GMT
Not After : Dec 9 23:59:59 2024 GMT
Subject: serialNumber=278bb9af056d5f878dbee2af2a3bf5f460e23f76423d6e3017efd1aec0af94ce, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:54:c8:0d:d1:5a:2a:8a:ba:6a:9b:00:f6:
cf:03:46:ec:51:db:c9:7d:20:fb:a3:80:97:88:b0:
fd:36:30:55:1e:98:fe:b7:82:af:fe:9a:be:d7:93:
4c:a0:bd:82:4c:de:8b:13:2d:be:f5:5b:f6:e1:d7:
81:a2:7f:23:f4:83:ba:ae:88:94:bc:39:63:0d:d4:
5f:87:03:85:fb:9d:6b:c9:82:05:57:d8:51:fc:dc:
9e:8d:d7:25:27:d9:2e:76:5a:12:15:30:d7:10:74:
ed:55:e4:c7:cd:65:07:65:72:68:4d:06:45:a2:ba:
4e:ff:7f:cc:68:37:7a:ec:22:8b:bc:0a:d8:bc:72:
54:3b:85:54:4e:8b:d0:e4:80:70:76:10:eb:5a:d8:
df:1f:26:06:19:22:77:31:77:68:fe:67:7e:a4:65:
8f:fa:a1:fd:5a:89:3f:46:fb:82:8e:f8:1a:f3:cd:
7b:44:40:dd:4f:f2:af:a9:13:6b:8e:06:fe:40:94:
07:33:f4:4a:ac:14:d6:92:b0:64:78:78:dc:30:b0:
c3:5f:f9:8f:c1:66:87:e6:86:cd:62:d6:f1:e7:e1:
58:32:1e:b0:9d:44:4d:59:6a:ef:ed:c5:be:b9:b4:
37:bb:a1:88:c0:3e:5e:2b:c2:04:1a:ba:73:64:7b:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:10:58:1D:07:94:AE:48:C4:C0:1D:38:DA:F7:B5:9C:4D:FD:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70f878ce-a193-47ae-b517-318c2b88892f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.96.0/21
Signature Algorithm: sha256WithRSAEncryption
03:bc:30:97:9c:80:5a:93:55:12:99:8b:d2:31:c9:77:09:0c:
56:98:f3:b5:24:36:81:49:14:4c:30:0e:5d:c1:56:72:a5:5c:
6b:51:e1:b5:75:45:71:af:08:5f:6f:74:c4:88:2c:38:69:56:
aa:00:12:26:71:16:67:9d:fd:73:a4:b6:36:0c:0e:4a:4f:29:
49:44:e6:60:12:48:a1:2d:d8:ba:92:36:11:62:39:bd:84:22:
a2:72:c8:51:22:ef:47:78:f5:c1:53:2c:a9:0a:64:6f:6f:ce:
c8:d1:27:ed:3e:48:de:f4:3e:33:38:8b:ee:ce:6a:c0:d8:f0:
c2:27:7d:f6:ae:5c:a6:73:78:5a:ed:a9:3c:19:d2:2b:c9:ea:
a7:dc:83:0b:6f:50:5a:7f:54:b4:1c:88:5b:1e:e4:e9:7a:9b:
61:f2:1a:0f:e1:79:05:48:7f:2e:32:59:84:48:e0:f5:59:08:
82:14:e1:a4:c2:d9:1d:96:fe:4f:b3:e9:e6:33:2b:22:e3:c1:
e2:65:42:9e:85:22:b2:6e:94:7d:ae:ba:cd:c3:85:4d:b9:3f:
6b:64:6e:27:6f:60:57:66:5c:f4:7f:6f:94:5c:5d:ad:36:c1:
01:b2:bd:ea:9e:c1:6c:3f:5c:2c:d8:f9:21:ec:b6:84:e5:d4:
f1:b3:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:39 2024 by rpki-client on console.sobornost.net