Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
File: 7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa (raw, json)
Hash identifier: B17+OJNUZyCAdZTVZEyPClBoN/xnock8ZIFEoHYDp0M=
Subject key identifier: B4:DD:CE:BB:53:FF:E3:07:6F:0A:7A:1C:7C:9E:18:D3:AF:C2:F7:4A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 791612D4143DE286F2899A7CA1ED5C6A0E8A1759
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:16:12:d4:14:3d:e2:86:f2:89:9a:7c:a1:ed:5c:6a:0e:8a:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=f20482a15e30145418c62398ef8c7ab115a84018cbfc9187670b741ee42bf0ea, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:c6:c2:a4:b4:b1:36:bb:33:9e:c8:21:9b:
d7:e4:6b:fb:93:a7:91:0e:bf:87:f2:74:0a:f8:fb:
19:dc:30:be:e7:2a:90:ad:7a:63:2c:f5:c2:92:53:
ca:6d:ff:df:5f:c8:40:02:86:ec:7c:e2:5a:9a:27:
1d:f0:41:56:3c:87:8c:86:82:9c:54:71:25:75:0b:
97:f9:49:99:4f:3c:43:20:5a:0f:65:67:7a:a4:73:
2c:b3:6f:05:69:ba:af:17:b2:97:48:35:c9:15:01:
7f:74:5b:75:25:75:e3:6a:f0:4e:8e:a5:13:44:35:
84:7c:ab:1b:1c:d0:19:8a:ab:0a:36:40:05:54:e2:
bd:43:89:da:64:63:2f:b4:e3:ed:0d:52:d5:d8:06:
9e:e6:2a:49:c7:c8:57:25:54:f7:0a:ee:37:94:a7:
2d:b4:20:98:a1:65:af:da:9c:a5:fd:3b:b8:cf:4d:
70:8d:d7:c7:b9:b6:8d:c4:48:8e:c2:f5:0b:d9:43:
5b:28:b6:f6:0e:0b:39:dd:02:54:dd:be:c0:15:55:
ad:e1:64:97:25:a0:0b:7f:28:65:85:e8:54:0d:33:
2f:cd:2f:a9:09:09:97:3b:cb:00:78:b8:7c:02:c6:
72:60:0d:81:66:61:f8:cb:37:43:84:e9:62:a2:38:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:CE:BB:53:FF:E3:07:6F:0A:7A:1C:7C:9E:18:D3:AF:C2:F7:4A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7986b90e-a286-4c02-b5e7-b85bd3d860a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:ff:68:dc:5e:d0:52:e5:14:0a:cb:9c:7a:bc:ba:44:15:57:
4c:eb:66:1d:7b:af:c1:7a:0c:2f:b7:e3:bf:de:7a:5f:78:82:
1f:01:e5:57:7e:96:93:59:61:96:86:73:b5:d2:21:99:c8:d7:
6b:ad:7f:74:40:5e:d9:b6:c2:6c:80:eb:43:71:37:e1:d2:8f:
40:36:73:fe:b2:e9:ec:ae:0c:b2:6f:86:6f:25:12:11:3f:99:
02:c0:c1:83:1f:e2:64:17:30:45:d3:c3:70:e2:1a:f2:d8:d9:
18:dc:ba:3b:bd:d2:b4:a2:a6:a9:26:52:c5:e7:f2:ac:3e:62:
54:11:4a:03:88:40:54:b2:74:6a:25:c5:b4:f7:80:97:6e:22:
b7:c3:d8:ee:d1:e1:7e:33:ad:df:a0:be:eb:a7:8c:2e:3f:03:
e1:cb:e0:42:f5:74:c6:f9:48:4b:47:1f:81:64:6b:80:59:70:
bf:cd:bb:0f:aa:46:46:fc:0a:2b:bd:4f:16:96:cc:ff:f5:67:
5c:b2:cc:89:4e:2c:0e:c2:e6:ef:a9:e1:ba:dd:08:7f:17:c7:
bb:64:7a:fd:7b:79:0e:fd:7d:31:77:52:1d:b5:6d:69:f6:7d:
41:b1:d9:09:4b:b9:5a:fa:ca:94:45:ea:4e:1b:60:0d:5e:9f:
fb:f0:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net