Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/79ac9682-f38d-4a27-a674-6ffa67d15d1f.roa
File: 79ac9682-f38d-4a27-a674-6ffa67d15d1f.roa (raw, json)
Hash identifier: sZd5Q2H15U9hC/2r+VOBCn3ctvY7ti7Qp1Tod0uiV6o=
Subject key identifier: 82:BF:2F:0D:D8:B0:B4:D5:FB:31:6B:80:AB:BB:DC:98:8F:88:9D:83
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50E72A0512957899698A239601A92DB62048D0AC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/79ac9682-f38d-4a27-a674-6ffa67d15d1f.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e7:2a:05:12:95:78:99:69:8a:23:96:01:a9:2d:b6:20:48:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=c44ed163f806679a5de401d3506ed86b8919184b9507229a5c9388444ec6e71a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:cc:fc:33:2c:05:d7:62:d9:11:e0:4f:76:
d2:0e:7b:97:db:67:b0:9a:4b:7f:dd:a8:6b:6e:2e:
d5:5b:a4:1a:d4:43:3e:d2:cc:07:1e:64:db:88:02:
fc:1a:5f:2a:62:ae:12:5a:56:20:1b:c3:0a:87:00:
05:3a:42:7c:45:22:ca:7c:47:ae:72:4c:80:ed:33:
cb:0f:f7:bf:56:2b:72:14:0b:6e:fb:ac:92:ff:c0:
8d:4d:63:b5:4e:0f:6a:93:62:ce:3e:40:f7:61:8a:
01:3e:ab:f8:de:85:c7:bb:bd:52:63:40:ff:b6:ff:
03:da:d5:53:41:33:95:45:49:45:09:85:5c:0f:c6:
1b:4d:d3:d6:78:7d:18:d2:57:c7:15:35:e4:81:1d:
7c:2d:fd:f4:f1:57:ba:49:ad:78:c1:5b:8c:88:7a:
01:37:b4:d5:2c:6a:13:1d:f8:1a:85:17:8d:5e:ac:
d8:cb:a1:c0:9b:57:3e:c7:1c:13:4b:c1:a5:97:20:
ee:ef:14:7b:c0:76:57:27:cd:be:d0:ac:10:c8:b7:
4f:e6:a3:57:d4:6e:15:56:c0:aa:ff:19:ef:5a:ac:
c5:33:4d:33:9c:bc:7a:cc:7c:bd:35:3f:4a:32:ac:
cf:1a:83:02:63:e0:e0:85:ca:39:34:16:e3:08:75:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BF:2F:0D:D8:B0:B4:D5:FB:31:6B:80:AB:BB:DC:98:8F:88:9D:83
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/79ac9682-f38d-4a27-a674-6ffa67d15d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
75:32:74:11:64:36:bc:c9:cd:e1:27:06:14:6a:4b:ee:57:c6:
0e:71:6b:89:b3:db:1b:0c:2b:89:27:36:e3:13:06:91:94:27:
89:3b:1e:0f:bb:89:5c:99:aa:cb:44:90:84:bf:71:e3:b5:ec:
8f:e7:7e:fa:3f:3d:81:e3:9e:95:19:2a:ec:9b:8e:22:08:69:
21:79:77:ac:56:73:56:c4:43:9f:c2:0b:5c:e4:84:f2:c1:f8:
2d:d9:56:f9:85:a4:91:fc:e2:c9:24:ad:3c:0b:7c:52:49:40:
fd:73:3b:98:5a:92:07:d2:2c:b0:2b:90:5e:36:67:3d:c8:58:
d3:ad:d4:c1:15:7b:0e:3c:5f:74:82:fc:66:90:81:dd:26:e3:
6e:74:b0:c8:bd:b6:50:d1:e4:f4:87:fd:9f:79:e5:aa:7f:35:
dc:d1:35:89:2a:97:bf:74:c8:11:49:d6:c1:28:69:33:f8:aa:
ab:ee:e3:c9:d7:38:63:3a:76:6d:94:3b:71:97:25:eb:ea:68:
4e:5a:9e:5c:d0:66:91:63:fc:fc:92:6e:50:06:5a:20:af:25:
a1:4c:9f:46:d4:1e:f9:00:a8:49:6c:ec:c7:96:62:78:55:d8:
e6:c0:ec:d7:cc:2c:b3:fd:a8:e1:79:83:e0:03:14:56:cb:51:
bd:da:a3:a1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUUOcqBRKVeJlpiiOWAakttiBI0KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGM0NGVkMTYzZjgwNjY3OWE1ZGU0MDFkMzUwNmVkODZiODkxOTE4NGI5NTA3
MjI5YTVjOTM4ODQ0NGVjNmU3MWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK80zPwzLAXXYtkR4E920g57l9tnsJpLf92oa24u1VukGtRDPtLMBx5k24gC
/BpfKmKuElpWIBvDCocABTpCfEUiynxHrnJMgO0zyw/3v1YrchQLbvuskv/AjU1j
tU4PapNizj5A92GKAT6r+N6Fx7u9UmNA/7b/A9rVU0EzlUVJRQmFXA/GG03T1nh9
GNJXxxU15IEdfC399PFXukmteMFbjIh6ATe01SxqEx34GoUXjV6s2MuhwJtXPscc
E0vBpZcg7u8Ue8B2VyfNvtCsEMi3T+ajV9RuFVbAqv8Z71qsxTNNM5y8esx8vTU/
SjKszxqDAmPg4IXKOTQW4wh12LsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSCvy8N
2LC01fsxa4Cru9yYj4idgzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NzlhYzk2ODItZjM4ZC00YTI3LWE2NzQtNmZmYTY3ZDE1ZDFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO4MA0G
CSqGSIb3DQEBCwUAA4IBAQB1MnQRZDa8yc3hJwYUakvuV8YOcWuJs9sbDCuJJzbj
EwaRlCeJOx4Pu4lcmarLRJCEv3HjteyP5376Pz2B456VGSrsm44iCGkheXesVnNW
xEOfwgtc5ITywfgt2Vb5haSR/OLJJK08C3xSSUD9czuYWpIH0iywK5BeNmc9yFjT
rdTBFXsOPF90gvxmkIHdJuNudLDIvbZQ0eT0h/2feeWqfzXc0TWJKpe/dMgRSdbB
KGkz+Kqr7uPJ1zhjOnZtlDtxlyXr6mhOWp5c0GaRY/z8km5QBlogryWhTJ9G1B75
AKhJbOzHlmJ4VdjmwOzXzCyz/ajheYPgAxRWy1G92qOh
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net