Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/71a3959f-fe88-470e-a579-701317fd3928.roa
File: 71a3959f-fe88-470e-a579-701317fd3928.roa (raw, json)
Hash identifier: 0c7x+tmRb8/ScAeof4HBdS6iwyqci0dXffniOziN2ek=
Subject key identifier: 6F:11:46:CB:BA:F6:9D:D4:23:9C:95:27:1D:EF:FB:A1:C1:DA:E7:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2ECD9B66770CA2CEADC8034A7DCB5992037753A8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/71a3959f-fe88-470e-a579-701317fd3928.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 212.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:cd:9b:66:77:0c:a2:ce:ad:c8:03:4a:7d:cb:59:92:03:77:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=9c70cff7a92751cbcd6cf79e252c3087cbb2a72cec9fcb788ac3afca7845d766, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:78:c5:8a:d6:c9:1b:46:06:2e:fa:80:33:
13:9b:fe:78:92:ae:2a:ab:1d:17:31:eb:93:0e:af:
f0:a8:9f:bd:0b:ce:16:b8:6d:66:a4:d5:d5:3c:87:
8c:42:0f:96:08:e6:c4:55:4a:13:ff:b9:50:86:f4:
e6:69:cb:a7:3e:b1:89:44:21:4e:46:ec:0b:13:b4:
c4:b5:f0:48:ce:24:74:da:70:41:c3:bb:a6:df:85:
ea:41:6f:e7:34:a1:96:7d:f9:c1:f0:b6:04:bc:3a:
6c:4f:0c:8b:3c:d2:f5:33:32:c3:ae:78:9b:d8:54:
29:3f:02:03:0a:9c:eb:02:87:fa:d7:8e:b8:6c:29:
8e:18:35:5e:ae:18:26:2c:e8:3e:7f:3f:eb:de:9a:
fc:5c:95:4b:e5:8f:39:a0:56:2b:1b:0e:7f:b5:6b:
5e:68:41:5f:7f:a1:fc:d8:46:e7:87:67:c2:67:72:
d4:6d:31:6a:c8:06:96:2f:6e:73:0f:5d:01:98:51:
ff:13:0a:a5:20:82:ff:74:04:cc:85:9b:1d:8c:34:
23:e8:b5:4b:b1:ef:3c:f1:55:7c:7d:56:6c:8a:6b:
a4:50:4c:f7:fa:cd:8d:14:f7:13:64:04:0b:d5:85:
c7:b4:c5:4a:c0:b0:ae:48:5a:2b:81:a2:be:38:e0:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:11:46:CB:BA:F6:9D:D4:23:9C:95:27:1D:EF:FB:A1:C1:DA:E7:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/71a3959f-fe88-470e-a579-701317fd3928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:1b:75:70:87:3f:73:cb:da:2b:6c:df:f9:8c:5c:b8:cf:93:
c9:30:94:b7:d0:37:e0:e3:d2:37:05:53:2a:d7:11:6f:cd:fa:
dc:82:d0:d4:e5:65:3d:a4:78:6b:b9:48:33:2a:37:1c:e9:d3:
6d:d6:17:66:35:7e:d3:76:2e:09:84:5d:cd:ba:8b:95:10:5f:
16:bc:9d:f8:b0:3a:73:c5:24:9a:2a:6a:b7:35:37:9c:73:d4:
11:ed:f1:80:4c:58:b0:2a:3a:41:0b:fd:63:5a:f0:7d:2a:c7:
15:d0:28:39:f6:01:fe:de:21:c1:b6:11:17:82:bf:18:b3:1e:
e1:de:62:c8:d4:8b:34:c3:e5:54:10:37:9c:3b:cb:95:80:ce:
45:73:32:3a:7f:20:bf:fb:41:8b:fb:56:cc:02:7d:7b:a9:39:
5f:65:01:07:de:38:0f:a5:92:4e:dd:1c:4d:54:83:79:ea:33:
a2:e2:e7:18:77:9a:8b:c1:fb:f0:c4:c3:6c:2f:79:03:b3:47:
5b:4e:08:ce:f0:cf:f9:c3:29:ee:d5:6b:84:b3:41:59:b6:03:
84:f5:ec:ac:0d:cf:f1:45:5c:f0:ff:38:c0:75:9f:31:b3:d6:
84:8c:85:ad:b2:0e:1a:29:81:d4:cd:60:22:2d:23:81:87:08:
12:97:7b:0d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIULs2bZncMos6tyANKfctZkgN3U6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDljNzBjZmY3YTkyNzUxY2JjZDZjZjc5ZTI1MmMzMDg3Y2JiMmE3MmNlYzlm
Y2I3ODhhYzNhZmNhNzg0NWQ3NjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFneMWK1skbRgYu+oAzE5v+eJKuKqsdFzHrkw6v8KifvQvOFrhtZqTV1TyH
jEIPlgjmxFVKE/+5UIb05mnLpz6xiUQhTkbsCxO0xLXwSM4kdNpwQcO7pt+F6kFv
5zShln35wfC2BLw6bE8MizzS9TMyw654m9hUKT8CAwqc6wKH+teOuGwpjhg1Xq4Y
JizoPn8/696a/FyVS+WPOaBWKxsOf7VrXmhBX3+h/NhG54dnwmdy1G0xasgGli9u
cw9dAZhR/xMKpSCC/3QEzIWbHYw0I+i1S7HvPPFVfH1WbIprpFBM9/rNjRT3E2QE
C9WFx7TFSsCwrkhaK4GivjjgckECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRvEUbL
uvad1COclScd7/uhwdrnhjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NzFhMzk1OWYtZmU4OC00NzBlLWE1NzktNzAxMzE3ZmQzOTI4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANSnMA0G
CSqGSIb3DQEBCwUAA4IBAQCqG3Vwhz9zy9orbN/5jFy4z5PJMJS30Dfg49I3BVMq
1xFvzfrcgtDU5WU9pHhruUgzKjcc6dNt1hdmNX7Tdi4JhF3NuouVEF8WvJ34sDpz
xSSaKmq3NTecc9QR7fGATFiwKjpBC/1jWvB9KscV0Cg59gH+3iHBthEXgr8Ysx7h
3mLI1Is0w+VUEDecO8uVgM5FczI6fyC/+0GL+1bMAn17qTlfZQEH3jgPpZJO3RxN
VIN56jOi4ucYd5qLwfvwxMNsL3kDs0dbTgjO8M/5wynu1WuEs0FZtgOE9eysDc/x
RVzw/zjAdZ8xs9aEjIWtsg4aKYHUzWAiLSOBhwgSl3sN
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net