Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/72138391-f885-46be-9450-815e493cd6a4.roa
File: 72138391-f885-46be-9450-815e493cd6a4.roa (raw, json)
Hash identifier: b5+IZC7CKWfRm1NeJmPtOl94EJmkVlv0jQsfeUVYhAE=
Subject key identifier: 74:EB:CD:8D:65:F0:82:C0:49:85:C5:28:33:85:97:3E:EE:96:89:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 763EA0677C65B83F7E514D74BD5C15602D9D8BAD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/72138391-f885-46be-9450-815e493cd6a4.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3e:a0:67:7c:65:b8:3f:7e:51:4d:74:bd:5c:15:60:2d:9d:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=d1aaa990736f58de0a86b7ae4fdb6f50cb39e313c7324ab92e339a4231d735c9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:f2:b0:25:52:8c:ba:c2:27:9e:8a:7f:c9:
c8:3a:e0:35:78:0c:1f:e8:54:3d:0b:82:a8:6e:dd:
05:cf:22:6d:31:d6:c0:75:73:22:10:cd:2b:95:1f:
22:05:02:78:76:9a:79:18:17:94:58:d6:4d:18:09:
42:f1:7f:01:24:58:d5:2a:7b:0d:20:d6:0e:6b:21:
00:ce:21:60:70:a4:eb:e5:0e:23:5b:8f:3b:ad:b5:
08:ce:53:77:55:9c:dc:45:4a:6c:b1:9d:6c:06:27:
85:23:86:35:4b:10:9a:53:eb:7f:f1:67:f9:bb:40:
40:4f:41:cc:ef:a7:3a:61:93:99:cb:40:ec:37:e5:
f0:9f:62:ec:b5:db:4e:cc:50:ab:f0:06:8a:1b:a0:
b8:2b:78:7f:8a:59:b4:e2:8f:a4:ae:ab:f5:d9:46:
9d:42:ac:cb:c0:06:59:6f:6d:28:2e:61:cd:02:56:
92:ff:07:56:fd:c7:e1:55:9d:da:e1:52:00:c7:a8:
0e:92:2e:cd:3f:79:77:3c:d5:a7:0a:64:8d:1f:d9:
ed:0d:42:7c:2c:09:e9:dd:3f:b9:d3:76:91:c2:42:
c5:56:87:b5:74:63:e3:2d:7a:b0:5c:a9:bb:5b:93:
31:29:aa:27:49:9f:e9:ad:a6:58:1d:1f:70:1e:fa:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EB:CD:8D:65:F0:82:C0:49:85:C5:28:33:85:97:3E:EE:96:89:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/72138391-f885-46be-9450-815e493cd6a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3c:8e:d6:da:1a:f1:87:73:6e:5c:86:a4:96:6d:e3:f3:83:fd:
94:aa:cf:1c:ac:a6:90:b2:45:89:db:1e:bd:8d:d1:c1:fb:af:
0f:f5:9a:21:98:16:59:b5:37:44:94:e7:66:71:4d:af:18:06:
7a:3e:eb:a3:7a:3e:13:ba:b7:cb:66:fc:64:a8:ba:03:94:39:
50:e2:26:c0:f8:67:d4:84:a9:12:b9:9d:6a:27:3a:7f:f5:d9:
48:ba:15:37:5e:7d:70:f3:23:9f:dc:37:07:b1:51:8f:c8:09:
c6:64:46:28:7f:b6:aa:df:4a:6a:10:4a:a6:7c:51:c6:7c:b8:
94:6b:04:fb:8f:09:e1:6e:4b:8b:6d:8e:4e:7f:19:cd:a4:7a:
a2:24:2f:2f:4e:54:bb:4c:b2:62:f3:c2:c1:71:55:08:3c:8d:
40:02:f8:f6:fb:59:a9:8a:51:94:31:84:fd:37:24:5d:5d:d5:
c5:8a:93:cf:0c:d7:24:41:3c:9a:e8:5d:9c:0d:97:c7:5f:17:
0d:f1:ad:c7:3a:6b:ad:88:8d:41:6a:2b:59:6f:79:cf:7b:d6:
22:05:2d:ef:d4:e5:0f:65:bf:d8:25:86:80:aa:68:8b:4d:6d:
5a:97:b1:b3:35:a8:d4:d1:f3:1c:07:73:43:36:cd:72:04:89:
9d:13:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net