Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80cad565-cf8b-4dae-8fb9-5e370577b884.roa
File: 80cad565-cf8b-4dae-8fb9-5e370577b884.roa (raw, json)
Hash identifier: 2yszbqPsk4+CG9qLrxzuTwa/Q+dS8X0bUFHYUg/zcQ8=
Subject key identifier: 50:7A:76:3A:7D:0A:56:BB:D3:BD:89:37:AE:CA:2A:94:8C:AD:9B:D4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1F54068F85C5634564B98C107CA3DAB8A2295882
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80cad565-cf8b-4dae-8fb9-5e370577b884.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:54:06:8f:85:c5:63:45:64:b9:8c:10:7c:a3:da:b8:a2:29:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=da9a7842a84120428bc28116d72d42dcb60e3a438a9a7b8fd7f271f8c68b52b1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:40:f3:d3:8b:3b:4e:6a:51:06:e2:7c:3d:
a7:3d:39:dc:8f:05:3b:6d:9c:94:22:16:4d:e3:41:
6e:97:61:67:7c:d9:93:60:15:09:3b:99:7e:d9:66:
f4:4f:d4:3d:26:34:0b:11:95:de:0e:24:2d:65:56:
67:64:e1:4b:b6:2f:51:a4:5f:98:05:f8:e8:64:2f:
3a:c4:82:90:96:1e:67:21:62:fd:32:d0:97:33:10:
e3:cb:d0:a0:91:f8:87:00:e4:4c:bd:ea:2e:9c:7f:
12:e9:80:c2:45:15:cf:45:71:36:8d:79:aa:5a:75:
68:b6:d1:55:1b:b7:da:54:d4:4f:df:71:59:93:6c:
09:f7:00:ec:b8:52:46:ba:82:54:01:2c:33:da:9a:
f9:26:70:8e:ce:2b:bb:09:b5:23:c9:6e:17:6f:a5:
42:c3:41:68:a9:1b:89:46:f4:2c:55:9b:da:70:cf:
e5:bf:a5:89:13:c6:55:7a:04:e8:f0:4f:2e:ba:ee:
af:dc:fb:bd:cd:e9:14:58:2c:46:46:cd:b5:b5:db:
d9:89:c7:83:c6:11:89:08:9c:e9:b5:48:00:37:b7:
85:1c:d1:72:26:08:a1:f2:5b:d9:8c:d9:56:e3:bf:
74:c0:89:9f:24:37:38:4c:13:8f:ee:a7:79:90:ff:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:76:3A:7D:0A:56:BB:D3:BD:89:37:AE:CA:2A:94:8C:AD:9B:D4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80cad565-cf8b-4dae-8fb9-5e370577b884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:a6:7b:92:9b:1f:54:ed:57:4d:c1:13:fd:31:07:bd:32:90:
60:30:fa:c5:ca:af:69:58:12:63:4c:f7:fd:3a:2e:f2:be:20:
6e:a5:20:e7:04:ae:48:45:54:bc:a4:e3:c3:6c:a2:76:5c:f6:
42:c4:3d:b6:bd:ba:9c:fd:04:3e:07:16:02:e7:b2:c8:19:ac:
b7:0e:c4:ae:bd:0f:a2:aa:f5:8f:e8:9c:be:64:a0:bf:7e:66:
85:b9:68:6c:50:48:12:79:00:0e:73:56:25:96:80:29:ff:6f:
30:a5:5c:7c:75:b4:87:c1:51:b4:9d:c9:7d:da:7d:46:bb:5d:
9f:72:b6:e1:4b:16:2e:22:79:5e:bc:92:35:60:50:89:50:4b:
ac:9c:65:4a:09:0e:b5:b9:28:b8:e1:e4:77:9d:0a:c8:ba:14:
58:11:82:93:bd:71:6c:83:1d:04:7c:c5:d1:4a:80:a9:5f:be:
e6:c2:8d:e8:e0:06:26:20:cd:97:4e:33:2d:3c:f4:93:bb:67:
2b:be:b0:d1:9a:3b:80:ae:a1:37:ee:18:0b:a9:2a:2d:7f:da:
f5:11:06:57:dc:d1:f6:68:07:41:bd:33:3b:fd:72:8b:b8:12:
da:4f:c7:71:6c:51:bb:95:45:40:5e:1c:c3:10:f6:29:99:fc:
3f:47:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net