Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7543ff60-93a7-4994-9621-6f2d090706f3.roa
File: 7543ff60-93a7-4994-9621-6f2d090706f3.roa (raw, json)
Hash identifier: pWOghcHOc3fhkX6MwOLcywoWtetQoMNR34Gh1NmaMMQ=
Subject key identifier: 29:07:01:A5:57:96:58:6A:7F:4C:7B:AA:8C:F1:20:F6:CD:C1:D7:49
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2FE94F12081BF3D287E2B27D49EBB1E7D57E4220
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7543ff60-93a7-4994-9621-6f2d090706f3.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e9:4f:12:08:1b:f3:d2:87:e2:b2:7d:49:eb:b1:e7:d5:7e:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=4c97134073cad604a6c0d5c57196c4837c648eeb1944e5b8c0a43aaaaa75d419, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:84:27:90:52:e0:e8:06:9a:aa:e0:7e:27:
df:3b:95:00:bc:8f:cc:5f:cb:60:a4:7a:6c:1e:29:
4f:c8:49:3d:4d:35:d5:84:3e:04:67:32:33:6c:68:
47:f0:6f:5e:b3:ea:c3:97:99:28:63:a9:9a:b5:af:
42:d0:80:88:87:77:a3:96:54:9b:8a:d1:c6:1c:da:
e2:5c:79:cd:56:fe:90:41:ae:74:88:42:3d:13:52:
70:49:64:25:ea:a6:09:9f:c9:72:7e:b0:e4:93:35:
f2:c2:46:cb:93:c8:b1:55:22:71:96:23:c1:f7:32:
3b:fb:71:31:5d:6e:77:79:5b:77:0d:c3:03:e1:61:
bb:cd:0f:dc:d3:56:6e:7b:6c:18:90:1e:54:1c:e5:
69:5f:fb:57:e5:01:1d:41:28:7b:1b:44:60:18:da:
d4:b8:7c:80:2d:76:d4:27:32:bd:c2:ba:47:61:34:
b4:0a:bf:8a:27:99:fb:5f:24:c9:8a:8b:ee:a5:b8:
bb:bb:fd:33:24:7c:2f:38:9d:ca:7d:38:fe:be:80:
33:72:68:0c:a7:f3:61:e9:77:20:8c:1d:ef:83:4b:
22:34:d0:97:d7:ce:f0:1b:ae:b7:b0:e4:74:95:73:
ee:9d:be:ec:8c:99:ff:e1:51:af:d3:03:74:75:c2:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:01:A5:57:96:58:6A:7F:4C:7B:AA:8C:F1:20:F6:CD:C1:D7:49
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7543ff60-93a7-4994-9621-6f2d090706f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:31:12:f5:2c:66:6e:70:40:77:3c:0e:ce:a6:c1:04:75:d3:
4d:f7:cc:8a:4a:54:4e:d2:79:5d:42:c1:cd:f0:c1:0b:e7:2c:
fd:6d:e6:b9:8b:f3:c4:e5:25:4f:c9:11:b5:56:52:55:c4:ad:
32:d1:33:4a:27:d4:c7:4d:0a:71:4d:43:e4:c5:fa:bb:54:02:
74:e6:14:c5:e9:18:46:34:a7:e2:4b:fa:de:ca:e6:46:78:27:
0f:28:ab:65:7b:cf:14:9c:32:7f:22:b3:a5:ae:14:78:5e:c6:
8d:d0:2c:dc:f9:4f:64:38:7c:15:c7:ab:b4:e8:92:61:44:68:
91:92:10:e2:c0:eb:d6:25:e7:82:08:cf:ec:4d:80:3d:01:23:
18:d2:e8:dc:96:61:09:04:e4:5a:2f:f9:74:89:85:63:3f:c1:
92:e1:03:2e:4f:7b:89:69:67:25:5c:6a:a5:9e:e2:b2:4b:4f:
7c:43:cb:9a:91:d2:16:c5:48:3d:67:ad:7e:9b:bb:0f:c2:a3:
71:0a:a4:aa:6f:6f:a3:82:86:71:e0:e8:05:62:b0:a3:6c:ec:
08:75:a4:00:cd:18:37:6d:ee:59:9b:a3:8a:6c:75:cd:29:8f:
4a:54:85:03:fc:f0:2f:54:fa:5e:19:d6:02:2b:41:5c:cb:8e:
47:2d:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net