Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7121a047-d001-4dca-a807-79f5c57d8a70.roa
File: 7121a047-d001-4dca-a807-79f5c57d8a70.roa (raw, json)
Hash identifier: 6vUbahtOjFIZMpfZs4fUBuyqyXbUmPOgC+q8omPl3gw=
Subject key identifier: F0:E5:9E:39:62:CB:F2:B5:23:A7:B0:62:27:78:18:C8:F0:A1:18:97
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0A51EDF04E1372F467A2AD82E2AA2E7D7ED35202
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7121a047-d001-4dca-a807-79f5c57d8a70.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:51:ed:f0:4e:13:72:f4:67:a2:ad:82:e2:aa:2e:7d:7e:d3:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=c6b5557dca75140ab0493452362f3c57b8e52d3b6c1c725ca5c38de34e90545c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:79:ae:a5:ff:81:28:54:28:3e:b7:2e:85:
82:cc:70:fe:30:f7:03:ee:2f:bd:b0:cd:dc:6c:09:
ce:80:6f:09:bb:f3:27:c2:db:0d:86:b0:25:49:d3:
96:ee:28:c9:bf:81:75:c4:cf:3a:a9:da:c1:f9:15:
3f:b3:43:e6:19:41:fd:6f:ba:a3:e0:70:e5:e5:58:
e1:e7:3f:71:6f:ec:bb:3c:63:16:73:cc:6a:f5:6a:
c0:01:04:77:bb:ea:b1:3c:25:9b:47:c0:09:b4:8a:
cb:6e:ff:3f:a9:15:19:35:a0:4d:c0:71:fb:7d:81:
1d:28:71:0c:f7:9d:b5:61:2c:14:c9:1f:55:4d:92:
6d:3c:04:84:7d:fb:6b:e0:70:8b:d8:ad:7a:83:7f:
8c:13:01:4f:fe:40:97:01:3f:36:c8:8d:94:b9:29:
38:77:9a:5d:b9:1d:20:79:1d:45:eb:d7:ce:18:bd:
cd:f8:c0:2e:8f:6b:a5:7b:10:07:c3:ba:c8:f9:7b:
f2:fa:98:a3:5f:65:09:da:c1:ea:84:42:c5:6a:58:
7d:ea:b4:28:20:61:92:13:2e:79:b9:41:76:c0:25:
65:aa:cb:84:1d:ea:c2:a4:29:f0:7e:be:64:93:8b:
80:0a:a3:c1:8d:f6:a3:3f:6f:a9:6e:11:b1:e2:78:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:9E:39:62:CB:F2:B5:23:A7:B0:62:27:78:18:C8:F0:A1:18:97
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7121a047-d001-4dca-a807-79f5c57d8a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:03:3f:fa:40:24:f3:f5:3f:6c:4c:86:1f:0a:9c:31:48:a1:
5e:c8:c4:91:40:36:55:d9:07:78:5f:c7:b9:99:2d:b1:c1:8c:
cc:99:24:3c:f7:56:50:a7:28:19:13:42:c3:47:28:8d:4f:e5:
c0:24:7c:c3:e7:9a:c1:64:f4:10:cd:92:c4:56:5f:8a:76:19:
bf:56:57:e0:88:42:b2:09:77:33:19:83:e4:e9:bc:88:f9:e9:
a1:1a:2a:5c:6b:ae:95:09:7d:b2:ad:43:f1:34:08:11:ff:b4:
aa:e9:4b:e0:29:40:27:6a:0a:bc:90:df:a7:ec:ba:0e:aa:5e:
2a:5b:9a:30:34:a0:8b:fb:e1:cf:24:a0:7f:44:da:da:08:ff:
48:a7:28:e3:c3:04:5e:0d:9b:74:eb:2e:53:8e:bd:16:42:8e:
88:d3:fd:e9:e0:8a:92:c1:a0:70:95:5a:58:7c:15:77:0a:77:
00:c6:fb:8f:d7:35:36:da:4a:91:3a:bd:9c:e8:e3:21:af:51:
89:fa:05:f2:ca:b7:e4:b8:ba:d7:b1:ca:7b:42:9f:70:e8:ed:
8c:c5:83:7a:62:0d:b7:ad:57:85:28:21:0c:09:03:e8:82:17:
10:4f:a3:42:67:68:53:45:ec:52:1b:fe:74:75:2d:52:1e:2e:
b4:aa:8d:be
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUClHt8E4TcvRnoq2C4qoufX7TUgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDMwMDAwMDBaFw0yNTAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQGM2YjU1NTdkY2E3NTE0MGFiMDQ5MzQ1MjM2MmYzYzU3YjhlNTJkM2I2YzFj
NzI1Y2E1YzM4ZGUzNGU5MDU0NWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIfrea6l/4EoVCg+ty6Fgsxw/jD3A+4vvbDN3GwJzoBvCbvzJ8LbDYawJUnT
lu4oyb+BdcTPOqnawfkVP7ND5hlB/W+6o+Bw5eVY4ec/cW/suzxjFnPMavVqwAEE
d7vqsTwlm0fACbSKy27/P6kVGTWgTcBx+32BHShxDPedtWEsFMkfVU2SbTwEhH37
a+Bwi9iteoN/jBMBT/5AlwE/NsiNlLkpOHeaXbkdIHkdRevXzhi9zfjALo9rpXsQ
B8O6yPl78vqYo19lCdrB6oRCxWpYfeq0KCBhkhMueblBdsAlZarLhB3qwqQp8H6+
ZJOLgAqjwY32oz9vqW4RseJ4MIECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTw5Z45
YsvytSOnsGIneBjI8KEYlzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NzEyMWEwNDctZDAwMS00ZGNhLWE4MDctNzlmNWM1N2Q4YTcwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADPwMA0G
CSqGSIb3DQEBCwUAA4IBAQBmAz/6QCTz9T9sTIYfCpwxSKFeyMSRQDZV2Qd4X8e5
mS2xwYzMmSQ891ZQpygZE0LDRyiNT+XAJHzD55rBZPQQzZLEVl+Kdhm/VlfgiEKy
CXczGYPk6byI+emhGipca66VCX2yrUPxNAgR/7Sq6UvgKUAnagq8kN+n7LoOql4q
W5owNKCL++HPJKB/RNraCP9IpyjjwwReDZt06y5Tjr0WQo6I0/3p4IqSwaBwlVpY
fBV3CncAxvuP1zU22kqROr2c6OMhr1GJ+gXyyrfkuLrXscp7Qp9w6O2MxYN6Yg23
rVeFKCEMCQPoghcQT6NCZ2hTRexSG/50dS1SHi60qo2+
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net