Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
File: 7438d445-a5f7-4e01-82a2-5975f6fc967c.roa (raw, json)
Hash identifier: eY0w3gWRc3UO8npaRrbocYWko6j3TwxsGQfR5klbZGY=
Subject key identifier: E5:93:83:CA:18:6F:F3:F4:3A:E5:39:7E:E9:01:FF:BF:AE:68:88:19
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4877B20B9B4C048C206385A4ED4823D210DA0E14
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:77:b2:0b:9b:4c:04:8c:20:63:85:a4:ed:48:23:d2:10:da:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=bcc297ecd0c0dba35b02f131207ae89b856901113737e4ecee1582168c1f983a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:8b:cc:58:7e:08:13:2b:b6:59:21:60:56:
c5:b4:c0:16:26:ee:e6:7c:75:5c:5a:d0:21:30:ae:
7b:d3:5b:cd:c2:c2:60:b5:ca:a1:26:50:88:58:0b:
3e:35:01:64:b8:df:5b:a3:9b:76:37:8e:7a:46:fb:
88:25:89:33:1f:33:c1:93:21:f7:73:6f:17:64:33:
aa:57:63:91:a8:72:2f:61:c1:b7:96:4c:2f:cf:57:
89:51:84:93:f5:97:1b:58:4a:e8:8a:7d:0c:cd:a8:
ff:7a:ad:98:f8:07:de:8a:a2:f6:f9:17:ba:70:db:
2c:11:29:a0:23:97:40:1e:ae:7b:2c:24:f9:28:26:
13:3f:40:7b:0a:f3:42:78:e4:5b:37:e4:6d:b2:ca:
0f:67:19:7b:23:cb:d0:3d:e8:2d:19:b9:93:3b:92:
dc:19:3a:66:fe:11:de:49:b1:84:98:26:e4:79:8f:
a2:64:c0:8b:55:4b:74:d6:3f:ac:57:36:40:4d:2d:
9d:65:35:05:d6:51:1d:09:8f:48:48:c1:ae:d1:ab:
3a:bd:6c:7a:f5:0a:4e:08:05:75:c3:d3:6d:4d:3e:
9e:db:a3:f3:c3:ef:cb:40:21:5a:20:f5:e6:8b:39:
af:b4:dd:f8:63:ee:db:04:f5:04:55:c0:75:fb:e7:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:93:83:CA:18:6F:F3:F4:3A:E5:39:7E:E9:01:FF:BF:AE:68:88:19
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7438d445-a5f7-4e01-82a2-5975f6fc967c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:2c:98:47:d0:0f:b8:dc:ba:5c:5c:77:11:2f:50:77:51:47:
2f:96:72:1c:83:92:b7:77:6c:c3:1e:93:65:cd:69:13:90:4f:
65:91:ed:d6:11:f5:7b:6f:25:b5:c4:9a:90:be:ce:46:ae:ea:
f8:1b:a3:69:3a:b0:ce:7b:8a:55:fd:c5:d9:b6:ee:ca:dd:c3:
89:03:6a:07:b8:b4:70:c1:6b:02:0f:21:db:16:7e:4d:19:72:
be:9a:0f:1c:b7:09:a8:13:e6:20:62:48:08:85:f6:a3:bd:d9:
49:46:33:03:c0:8f:78:05:9d:40:c0:07:c6:1d:2a:72:f5:72:
2b:4c:76:53:ba:87:51:74:c2:68:e8:0b:88:94:22:04:a1:17:
70:cc:75:27:52:31:57:4e:c4:86:cf:77:0f:ba:3e:b9:44:34:
48:e7:b8:97:83:8d:ab:02:69:d6:26:5e:5f:d8:8c:77:54:bd:
a1:2c:b2:64:1f:9c:7b:41:b4:dc:56:d5:63:d9:5d:a0:c1:aa:
5b:d4:bf:a6:aa:7a:5a:ba:3f:71:f5:f6:06:de:a1:41:68:cf:
51:f2:52:71:46:90:d7:71:44:7d:d4:01:9d:b8:cb:69:43:54:
48:30:10:da:d4:85:13:d4:34:50:02:60:0b:80:3e:ee:98:33:
af:6e:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net