Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
File: 7764f303-17ca-41de-afb2-e2a4278e047f.roa (raw, json)
Hash identifier: nLxiMZ2Y+E716dOPt1wUhsO5/V7cpKiNPqgOUIxhr0U=
Subject key identifier: F2:69:D4:4D:FB:AE:6C:1F:A3:6F:E5:52:71:F3:C8:51:0C:04:97:0D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 15D55C3E99C551A19D1011BC76A4EB0BA2EE6C95
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d5:5c:3e:99:c5:51:a1:9d:10:11:bc:76:a4:eb:0b:a2:ee:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=716d427edb628f6d3102ae23c269105afd01e75b966f1f23cf5402ccba9ed299, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:41:f6:bc:23:76:c4:4a:b8:af:19:ad:64:
c6:7e:48:ce:7a:ed:aa:1c:58:bb:c0:af:0d:ba:25:
68:22:b7:cd:fe:9f:d2:7f:55:35:0c:d5:7b:c7:e5:
5e:cf:c5:50:e0:61:46:3c:8d:78:bf:58:c2:58:4f:
63:61:32:83:71:56:4e:b3:a1:a2:d2:a9:56:5f:94:
de:75:e3:5a:4c:0f:d2:a9:c4:2c:1d:29:13:da:c1:
b5:d6:c2:a3:a9:b2:5b:20:bd:d2:f8:55:1f:bc:9b:
38:ce:83:6b:ea:84:78:61:a2:1d:0f:f4:19:12:9d:
58:91:e6:d9:e4:2f:9a:f9:bf:fb:1a:e1:6b:67:93:
2d:37:7f:6a:6b:8c:25:45:41:69:81:2c:7c:f5:80:
4b:7b:10:69:85:8c:91:65:08:1b:4a:9d:02:98:5c:
25:8a:33:0a:86:31:cb:14:4f:ad:60:57:64:b6:ad:
31:1e:94:e9:d3:89:46:30:8c:a4:c0:b1:2d:b8:46:
75:d4:58:25:2f:48:2e:2e:33:e4:49:22:69:eb:8d:
43:c5:78:ef:94:fe:85:20:a4:2e:08:6f:d1:c4:05:
34:6d:e2:95:03:39:c0:a1:1f:04:c7:7f:ce:ff:a8:
06:26:08:5a:19:01:92:df:7f:51:34:ce:25:c1:5a:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:69:D4:4D:FB:AE:6C:1F:A3:6F:E5:52:71:F3:C8:51:0C:04:97:0D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7764f303-17ca-41de-afb2-e2a4278e047f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
33:d8:20:45:d7:57:ba:d3:72:fb:f0:1c:dc:07:c8:18:5a:8c:
6e:ee:19:68:31:b2:0f:e0:3d:b2:b2:59:fa:0e:8f:82:b3:7a:
40:2b:ff:42:c8:b0:bb:cb:c0:f5:a8:a2:71:10:a6:ea:d2:83:
83:f9:41:ee:6e:42:64:5b:04:f8:1e:30:03:71:e8:d4:60:ff:
12:08:c9:3d:1e:a4:c0:d6:cd:b7:76:0a:77:44:f4:92:0e:f8:
56:e5:90:e5:a3:41:57:39:fd:b3:33:88:14:62:5f:7c:cb:56:
b5:5e:e5:f9:df:ff:cd:ed:e0:da:de:b9:8e:f0:41:a5:b4:68:
28:01:5e:bf:b9:4a:10:38:6e:ce:4d:42:1a:3f:e0:ab:8b:4b:
d0:a8:c2:dc:8a:46:47:e8:0b:ca:04:62:47:2c:c1:6e:2a:dd:
99:48:47:be:65:64:47:7e:ca:27:b5:c4:f1:00:55:1c:0e:ff:
a1:d9:c5:46:69:8b:f1:87:e3:eb:a1:13:84:6e:51:cd:bb:11:
5f:86:59:d0:59:74:3a:61:be:06:42:30:6a:28:6c:30:e8:7c:
a4:47:a7:f2:24:a3:a1:15:aa:ef:44:15:42:7b:21:a6:34:22:
3d:60:45:a7:59:d4:e1:b1:61:67:2b:07:78:8a:b9:88:13:26:
7f:f9:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net