Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/77b69854-7acc-4257-9488-ffcab8197c82.roa
File: 77b69854-7acc-4257-9488-ffcab8197c82.roa (raw, json)
Hash identifier: UFuQYsVkVqxRibYH23UYiBR/8g12a6nnoC81wMyQLaE=
Subject key identifier: DB:CB:AF:27:E9:1B:36:65:FF:2A:81:A3:E9:9B:07:32:76:2B:64:71
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2B64B20C4AD8F6D1319F1BDA33F4405EEBE14534
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/77b69854-7acc-4257-9488-ffcab8197c82.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:64:b2:0c:4a:d8:f6:d1:31:9f:1b:da:33:f4:40:5e:eb:e1:45:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=d0567c88c01284256692044ce0a855c3951dce6e5c1c51bcc7f6ed4ae643f746, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:83:93:a3:5d:81:31:f5:d8:c6:2a:3b:07:
7d:be:ae:38:8e:87:27:2d:34:16:05:12:e1:37:1a:
ae:d2:f8:ea:9e:b8:6b:33:e7:b7:1e:4e:c2:5b:b4:
30:01:f8:38:ec:81:f2:7f:12:f6:b9:9a:df:0f:6d:
4f:36:17:5c:a8:de:ae:1e:02:a2:c2:cb:04:e7:3b:
f4:fd:e0:88:0b:65:16:c4:f1:3d:ae:fe:16:02:49:
df:98:2c:54:39:f7:87:d0:fe:ce:57:c3:3b:97:eb:
a6:86:f0:76:06:e4:5d:c0:2d:c2:19:d3:a3:14:7a:
58:bf:21:41:6e:ce:17:00:48:9f:00:18:c8:01:bb:
84:6f:b1:71:bd:cd:b5:f2:ee:73:53:06:6b:20:9a:
1e:55:14:cc:9a:e0:6b:73:22:e5:42:70:2b:cd:43:
9d:f7:28:fd:99:4e:cd:03:13:1a:5a:2f:6f:23:9e:
a7:2c:6e:b9:e2:d9:b3:8b:18:bf:ca:b0:0c:98:8b:
3f:0d:49:e3:97:2f:c7:55:71:46:33:53:ee:da:f3:
48:de:8d:c7:01:6f:16:84:20:e9:70:d2:61:29:6e:
f1:07:68:67:0d:43:0e:c0:45:67:59:56:4a:24:24:
b8:28:9e:6d:67:6a:6a:2a:23:f9:d8:22:49:08:cd:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:AF:27:E9:1B:36:65:FF:2A:81:A3:E9:9B:07:32:76:2B:64:71
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/77b69854-7acc-4257-9488-ffcab8197c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:c3:50:c3:2d:fd:40:9c:0d:af:46:66:88:9b:8c:07:76:11:
0b:a7:26:19:06:42:f8:b0:b9:47:cd:da:9f:f8:33:82:f7:d6:
83:cd:80:90:a1:57:63:a0:87:90:0c:3e:22:07:75:6f:85:73:
50:95:ca:21:48:b5:2c:13:3b:0a:49:31:e3:3f:ae:1b:d7:ac:
ab:f5:1d:bd:37:28:36:d1:8c:86:94:7a:37:57:6c:5e:86:13:
62:06:42:4c:15:e9:15:b1:de:86:d3:0c:6d:8a:d7:5b:8d:23:
30:9e:17:63:e3:1a:e5:af:04:53:0c:cc:a8:b5:7b:60:17:68:
9e:06:2d:43:d2:bc:a2:c1:53:72:89:6b:50:53:df:26:30:4e:
79:16:f2:67:c2:e9:dc:48:07:4e:d0:ad:76:28:76:5e:1c:5d:
ba:9d:1d:e1:57:fc:bc:43:6d:09:c5:f0:7b:a3:33:b5:4e:56:
85:d0:56:70:9b:48:61:d0:fa:22:43:31:f1:1f:21:09:7c:5f:
d4:8b:fc:3a:15:fa:0e:35:6a:f9:61:f6:7e:c8:89:74:cf:76:
32:28:87:1c:c3:15:06:8b:c6:d5:06:2a:fd:cb:ef:79:53:00:
86:45:9e:8d:47:d1:dc:ae:94:5f:df:ec:5d:85:d4:f5:7d:c3:
30:a3:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net