Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d69dca7-aabd-4aa0-8ae7-a0abd4050eca.roa
File: 7d69dca7-aabd-4aa0-8ae7-a0abd4050eca.roa (raw, json)
Hash identifier: XokYMUb4uW03ekv6wtFUr/FZO/3r0xb7ctkowf8jP9Q=
Subject key identifier: 5C:9D:E8:61:7F:02:14:99:62:3C:6C:48:03:2A:CB:67:2D:10:16:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 208BD179A9943CEB63DCFEC86BF73E4BF4E7A22F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d69dca7-aabd-4aa0-8ae7-a0abd4050eca.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8b:d1:79:a9:94:3c:eb:63:dc:fe:c8:6b:f7:3e:4b:f4:e7:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=28008898cebd09861abfc362c62a735f6a0f84113b5b49f4ce976ecad6b4dd59, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:32:79:be:29:f6:66:22:66:b1:2f:3d:31:
cd:2e:84:41:d3:ba:15:b7:86:57:92:a7:0b:66:87:
8a:d5:b4:21:ab:15:bc:75:10:3b:b2:4a:78:3a:a5:
21:7d:b5:31:a9:52:be:eb:dd:56:bd:90:5a:19:e4:
1f:93:12:0a:3b:1a:85:bb:14:d0:c9:62:c0:24:59:
4d:1f:e2:b5:0d:3b:f5:17:b2:62:ac:98:2c:3b:91:
0e:0e:92:fa:4b:3f:40:d8:ef:0f:d2:7f:12:47:5e:
66:47:ff:18:0f:a7:00:6e:77:77:4d:18:1f:2e:a8:
fe:c8:03:6b:3b:4c:45:44:55:e7:51:d1:77:66:f6:
e4:73:8d:77:e4:40:68:3d:0c:52:15:76:7f:26:bc:
cc:26:c4:68:24:5e:36:6a:56:a8:35:c6:b9:3f:f1:
f6:dc:8a:b4:f8:7e:13:a9:10:74:ad:af:5b:67:62:
53:23:28:f0:87:39:75:1d:f7:15:78:01:a5:ce:2e:
46:25:a3:25:f1:3f:9c:26:3f:08:96:74:4c:83:b5:
1d:2f:c6:61:c1:0c:cc:f0:75:23:71:ae:b9:55:0a:
ec:2d:27:49:96:6a:2a:f2:f1:a9:00:f6:22:2a:92:
f8:6b:8c:44:37:1a:fa:6d:12:95:db:20:88:d7:26:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:E8:61:7F:02:14:99:62:3C:6C:48:03:2A:CB:67:2D:10:16:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7d69dca7-aabd-4aa0-8ae7-a0abd4050eca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:fa:ce:85:0e:f7:2c:8b:7d:e8:17:3e:70:da:ca:6c:12:73:
1a:53:ec:d3:3e:ad:f2:ac:15:7c:ee:ee:1a:d8:b4:29:98:54:
44:8b:16:ef:f1:22:c4:9b:cc:3c:35:b3:8a:74:4d:fb:90:69:
dd:f8:d8:13:0e:c7:80:0a:3b:42:03:c0:a7:a2:f0:e2:ec:5f:
c2:75:ab:00:44:fe:03:3f:88:37:80:f8:7d:f4:e9:ab:4d:26:
c1:2f:9f:66:f3:4b:d9:49:dd:52:ba:d9:84:d6:ab:73:5f:23:
cf:12:b5:5d:49:0c:13:43:19:07:35:90:c8:ea:a9:33:39:0d:
4f:1c:05:1d:81:85:00:44:04:15:cd:ad:24:07:cc:46:ff:36:
53:c0:0c:36:8f:ae:fa:5f:69:a4:28:fb:84:e6:16:ba:4b:7e:
a2:6a:fd:9c:96:8b:40:96:7f:88:6f:55:a7:a9:3d:79:51:bc:
88:5e:50:f8:1d:af:54:bd:75:1d:17:60:c4:5e:1b:c7:ec:f3:
fc:b5:88:53:d4:7c:dd:ef:85:59:e0:5d:5d:a3:8f:ea:bd:37:
61:69:5e:28:d7:be:d2:f2:90:ee:28:cc:eb:22:a1:44:54:17:
43:25:08:c7:53:7a:7a:c2:d0:02:5f:f0:8f:55:a7:c8:f2:9e:
aa:27:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net