Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f742b91-ded4-4d8e-bd36-0b187f27fb23.roa
File: 7f742b91-ded4-4d8e-bd36-0b187f27fb23.roa (raw, json)
Hash identifier: DsIIbV3XrsHx0unHZpIRgD1I/7EQX+DZSfiIbtJeDDU=
Subject key identifier: AA:E1:FF:B1:2F:2A:53:4C:1E:FF:2E:25:BA:03:76:5B:B8:6D:95:45
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 424C82B2DC971CE515A2824BE567F0B00DA87591
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f742b91-ded4-4d8e-bd36-0b187f27fb23.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.214.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4c:82:b2:dc:97:1c:e5:15:a2:82:4b:e5:67:f0:b0:0d:a8:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=4fb07e892380f4ac1ea06481c97a57e24b611ac92dd07a3cad56a34519bfa5b1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:18:fd:0c:8a:10:80:fc:5e:2c:39:0b:37:
6c:89:47:d0:05:13:4f:13:cc:df:40:b3:75:dc:29:
b1:82:6a:10:46:cd:44:38:4c:58:72:09:f8:3d:eb:
2f:db:4f:77:ae:2c:8b:de:ac:bd:e7:d9:77:73:81:
39:83:4a:ba:21:f3:d6:37:0e:85:ee:c6:be:2a:03:
7c:a4:ad:d8:07:84:a1:23:4c:d5:ec:40:2a:9e:95:
da:83:26:df:3e:64:d1:9f:c5:12:7d:49:c7:87:41:
ed:c5:93:17:66:1c:9d:0d:f3:42:86:e0:bf:a0:5e:
a6:cb:7b:f1:c1:c0:ed:4d:a8:6a:39:42:9f:4e:8e:
9f:c5:00:7a:3e:09:34:c0:c7:b2:fc:1f:46:a8:51:
6d:b9:d5:c6:e2:4e:00:1b:96:16:84:5f:72:08:ae:
dc:a4:a3:1f:f5:83:82:a2:ba:f4:bc:89:0a:e0:40:
5a:26:f4:71:01:a1:4a:f2:42:10:fa:14:0c:e3:35:
f8:5c:fd:0c:e5:bc:73:00:d2:45:9c:16:48:c1:58:
0d:38:5d:98:56:eb:24:68:b2:69:9c:f3:df:e1:3f:
cc:65:ee:c9:38:6e:ef:34:04:8e:54:8f:73:cb:e2:
c4:52:f8:ea:26:43:d5:76:f3:c1:a7:90:4c:23:95:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:FF:B1:2F:2A:53:4C:1E:FF:2E:25:BA:03:76:5B:B8:6D:95:45
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f742b91-ded4-4d8e-bd36-0b187f27fb23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
39:5b:57:97:e2:19:7d:1f:20:a6:24:d9:38:23:c8:4b:a5:24:
38:34:83:fb:0f:a2:57:e0:45:1e:5c:d5:75:2a:c5:d6:67:de:
02:38:5e:d2:e4:7d:74:13:95:cf:3d:5f:00:c5:6f:c6:68:ad:
43:76:f1:a7:98:27:b9:84:99:da:9a:8b:68:56:b6:ef:0f:9b:
ad:11:05:d7:7c:31:5f:53:8d:8f:fc:b1:d9:18:03:9d:40:5b:
62:7c:14:25:1d:34:95:71:82:d5:3d:98:1f:52:9d:2f:61:f2:
66:b6:2f:7b:6f:e7:ba:f2:1a:7b:b4:fe:8e:5a:af:c4:ae:fd:
91:fb:9a:5e:de:29:cf:ad:2a:40:30:95:5c:53:7a:00:f7:61:
f0:09:ab:a6:34:d8:65:8f:ff:cf:20:24:06:a9:10:8d:92:7f:
13:40:98:83:d8:d7:05:98:bc:87:bc:92:99:a4:7f:78:b6:d7:
ba:c8:a5:6d:82:37:ff:d5:41:36:a9:67:51:75:0c:c2:66:83:
38:e9:46:d4:e2:a8:78:98:23:91:8a:59:45:75:c2:a7:5a:8d:
61:4b:31:c2:5c:b2:c8:1c:33:25:b8:18:ca:0c:39:af:55:d0:
29:1d:ff:e1:09:39:b5:ba:f2:ed:8c:38:d2:05:9a:69:dc:10:
07:18:55:0f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUQkyCstyXHOUVooJL5WfwsA2odZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDRmYjA3ZTg5MjM4MGY0YWMxZWEwNjQ4MWM5N2E1N2UyNGI2MTFhYzkyZGQw
N2EzY2FkNTZhMzQ1MTliZmE1YjExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM8KGP0MihCA/F4sOQs3bIlH0AUTTxPM30CzddwpsYJqEEbNRDhMWHIJ+D3r
L9tPd64si96svefZd3OBOYNKuiHz1jcOhe7GvioDfKSt2AeEoSNM1exAKp6V2oMm
3z5k0Z/FEn1Jx4dB7cWTF2YcnQ3zQobgv6Bepst78cHA7U2oajlCn06On8UAej4J
NMDHsvwfRqhRbbnVxuJOABuWFoRfcgiu3KSjH/WDgqK69LyJCuBAWib0cQGhSvJC
EPoUDOM1+Fz9DOW8cwDSRZwWSMFYDThdmFbrJGiyaZzz3+E/zGXuyThu7zQEjlSP
c8vixFL46iZD1XbzwaeQTCOVrZ8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSq4f+x
LypTTB7/LiW6A3ZbuG2VRTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
N2Y3NDJiOTEtZGVkNC00ZDhlLWJkMzYtMGIxODdmMjdmYjIzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPWMA0G
CSqGSIb3DQEBCwUAA4IBAQA5W1eX4hl9HyCmJNk4I8hLpSQ4NIP7D6JX4EUeXNV1
KsXWZ94COF7S5H10E5XPPV8AxW/GaK1DdvGnmCe5hJnamotoVrbvD5utEQXXfDFf
U42P/LHZGAOdQFtifBQlHTSVcYLVPZgfUp0vYfJmti97b+e68hp7tP6OWq/Erv2R
+5pe3inPrSpAMJVcU3oA92HwCaumNNhlj//PICQGqRCNkn8TQJiD2NcFmLyHvJKZ
pH94tte6yKVtgjf/1UE2qWdRdQzCZoM46UbU4qh4mCORillFdcKnWo1hSzHCXLLI
HDMluBjKDDmvVdApHf/hCTm1uvLtjDjSBZpp3BAHGFUP
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net