Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7192e761-05a9-4c3e-9b22-eb3ed0c37d68.roa
File: 7192e761-05a9-4c3e-9b22-eb3ed0c37d68.roa (raw, json)
Hash identifier: W/gCgA2FDDlKH3D53yLBMWZQ9pVykGXvk28kvJQ7Iqc=
Subject key identifier: 68:14:A1:87:A2:47:F9:63:41:31:1F:EF:03:C6:6E:DB:1D:92:72:45
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49F7CD37A5BBE4C8571BFAECABD17611EE2A64D9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7192e761-05a9-4c3e-9b22-eb3ed0c37d68.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.208.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f7:cd:37:a5:bb:e4:c8:57:1b:fa:ec:ab:d1:76:11:ee:2a:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=5a36e0d84619b31c72da2f8f5b4ba6934d70ed349c430c18b9d645a9cf6b186c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:4b:aa:60:37:4e:1d:a2:93:2c:3d:99:fe:
95:de:0d:f6:4f:67:b4:11:0a:fc:aa:76:96:83:12:
2c:2f:df:76:65:f2:4a:6d:8b:79:a1:42:06:b8:8f:
43:7a:d9:2a:13:21:65:f6:66:78:c5:04:4e:5d:f8:
8e:49:45:55:79:50:4e:2b:da:f3:b1:fa:0f:b2:1b:
74:42:20:fa:02:9d:f9:f5:8b:8d:10:38:5c:d4:1f:
ff:84:98:42:84:8e:7c:1c:c6:30:36:8e:90:61:41:
b7:cc:7d:25:fe:55:41:73:dc:93:b8:d8:2a:d4:3e:
a2:62:4f:03:89:59:eb:b7:49:3c:8c:66:fe:63:10:
f3:42:4f:b5:e0:c2:9b:15:74:b4:19:ea:d2:af:c6:
77:bd:9a:d5:16:8d:b9:af:d7:87:f7:ae:35:87:17:
e4:00:26:e0:15:01:2a:d2:b3:93:15:05:82:3a:66:
48:6b:22:66:5e:ff:d1:e9:52:d6:dc:d3:62:70:5b:
23:c7:5e:b2:e4:e5:77:6f:69:59:d5:c9:b2:ce:5e:
89:07:09:d8:4d:4c:7c:cc:38:25:fa:d8:53:2b:18:
f2:f4:ee:94:96:93:1e:fd:cd:77:dc:77:d7:fa:c1:
be:6d:99:1a:83:83:54:67:60:0f:23:96:b6:d7:5d:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:A1:87:A2:47:F9:63:41:31:1F:EF:03:C6:6E:DB:1D:92:72:45
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7192e761-05a9-4c3e-9b22-eb3ed0c37d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.208.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1e:1f:42:82:31:4b:80:d1:92:26:10:b7:16:5a:03:80:e0:e6:
a7:03:7f:4b:8b:8d:c6:68:c8:2c:52:21:10:df:60:84:ff:fc:
73:3b:66:b2:b5:eb:a1:cb:09:38:01:bd:dc:ed:23:56:86:e0:
37:53:51:ff:30:1c:2b:6d:99:55:44:6d:8b:60:46:a1:a3:35:
27:ed:2e:62:03:8e:57:18:7d:3b:9d:04:9c:ac:77:d9:6e:e9:
0f:dd:68:ea:a9:54:96:a0:01:91:03:71:6d:c1:8e:c0:0a:00:
e6:30:18:cc:a2:6a:7f:7e:5f:83:ef:e2:53:34:70:ac:3c:56:
b9:2c:b9:69:5b:2a:4e:bd:2a:5e:ad:c2:f6:99:de:84:96:c7:
e0:40:7a:4d:37:68:cf:ee:c2:92:41:24:ad:0f:9f:dd:c5:fa:
66:b5:f9:14:c9:5b:8f:45:a2:0d:ba:ce:4c:05:73:cd:45:3a:
f2:43:1c:5b:10:d8:b8:95:5d:8e:9a:30:56:b7:08:c2:b7:68:
7f:4b:e5:1b:1f:9c:f9:e0:2d:65:5d:a3:3d:4d:31:5c:b0:43:
ef:1b:42:6e:6b:e8:62:47:bc:b1:cd:f4:f5:b1:66:ad:92:19:
7a:b5:37:65:9c:ad:0d:02:81:ba:83:d4:24:98:d9:69:f0:e2:
e4:b6:da:37
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSffNN6W75MhXG/rsq9F2Ee4qZNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDVhMzZlMGQ4NDYxOWIzMWM3MmRhMmY4ZjViNGJhNjkzNGQ3MGVkMzQ5YzQz
MGMxOGI5ZDY0NWE5Y2Y2YjE4NmMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ0tS6pgN04dopMsPZn+ld4N9k9ntBEK/Kp2loMSLC/fdmXySm2LeaFCBriP
Q3rZKhMhZfZmeMUETl34jklFVXlQTiva87H6D7IbdEIg+gKd+fWLjRA4XNQf/4SY
QoSOfBzGMDaOkGFBt8x9Jf5VQXPck7jYKtQ+omJPA4lZ67dJPIxm/mMQ80JPteDC
mxV0tBnq0q/Gd72a1RaNua/Xh/euNYcX5AAm4BUBKtKzkxUFgjpmSGsiZl7/0elS
1tzTYnBbI8desuTld29pWdXJss5eiQcJ2E1MfMw4JfrYUysY8vTulJaTHv3Nd9x3
1/rBvm2ZGoODVGdgDyOWttddvcsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRoFKGH
okf5Y0ExH+8Dxm7bHZJyRTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NzE5MmU3NjEtMDVhOS00YzNlLTliMjItZWIzZWQwYzM3ZDY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPQMA0G
CSqGSIb3DQEBCwUAA4IBAQAeH0KCMUuA0ZImELcWWgOA4OanA39Li43GaMgsUiEQ
32CE//xzO2ayteuhywk4Ab3c7SNWhuA3U1H/MBwrbZlVRG2LYEahozUn7S5iA45X
GH07nQScrHfZbukP3WjqqVSWoAGRA3FtwY7ACgDmMBjMomp/fl+D7+JTNHCsPFa5
LLlpWypOvSpercL2md6ElsfgQHpNN2jP7sKSQSStD5/dxfpmtfkUyVuPRaINus5M
BXPNRTryQxxbENi4lV2OmjBWtwjCt2h/S+UbH5z54C1lXaM9TTFcsEPvG0Jua+hi
R7yxzfT1sWatkhl6tTdlnK0NAoG6g9QkmNlp8OLktto3
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net