Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa
File: 88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa (raw, json)
Hash identifier: i2W6KzGdd2rpBIPNYl9AUJSsAYOfaS4OrTRF1tA0IKQ=
Subject key identifier: 89:2B:4B:62:4F:F7:4A:F1:DE:CF:7C:17:50:7E:D8:F1:0A:FC:90:57
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1B18067F9990C5C97F4DD0E634731E7E17EC98DF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.96.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:18:06:7f:99:90:c5:c9:7f:4d:d0:e6:34:73:1e:7e:17:ec:98:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=915cc199e79ccd8c0f68f4d8c5900b88fbd747d970ba4ec96c26078ef6a793ea, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:60:b6:be:e1:3f:a4:a2:a1:09:d2:33:c7:
1c:70:0b:e9:6d:8e:4b:b4:d2:87:58:fc:e8:4b:5b:
fb:5b:d5:7b:9a:b9:51:5c:80:7e:24:46:b1:8e:70:
39:ea:0f:1a:32:f9:c8:8e:38:9e:6a:ab:aa:31:66:
b8:eb:4a:b8:38:7c:ec:58:c1:3c:ec:3a:26:a9:47:
5a:2d:47:cd:25:1d:4c:99:f6:d1:86:d8:82:58:ca:
11:4d:0e:ba:81:10:b0:94:80:96:81:c5:53:36:90:
e1:67:de:44:f9:78:58:cb:46:bf:50:92:ea:64:d3:
d3:de:2d:8d:b3:54:dc:ea:b7:58:53:c1:3b:30:4a:
2b:45:7e:c6:48:5b:56:ab:58:d0:13:79:f8:a8:98:
cb:3c:27:17:97:48:e3:32:b9:6b:12:61:a6:a4:cc:
46:7f:73:b5:e6:64:49:a4:ce:fa:38:df:2c:1f:83:
a2:1b:cd:9c:77:34:46:73:a7:af:3c:2f:2e:da:c2:
20:6a:db:93:84:93:0f:a0:ee:93:6b:78:12:d1:b0:
cd:c9:56:d3:15:e8:03:e3:ff:00:47:f5:66:8b:ee:
f8:e3:13:a5:27:4a:73:75:6e:6d:d1:01:45:c3:ba:
f4:8f:12:f0:5d:26:62:d9:c6:83:36:2f:94:25:58:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:4B:62:4F:F7:4A:F1:DE:CF:7C:17:50:7E:D8:F1:0A:FC:90:57
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/88ba3d30-157d-4964-8f1d-fb8f9726c40f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:1b:64:0e:7f:93:4f:67:ba:b7:2e:57:90:78:9e:e9:04:78:
3c:56:d7:07:7d:ad:8c:c6:a6:cc:22:2d:63:95:61:04:0f:51:
7d:8e:75:8f:ef:a7:ef:c3:41:4c:23:53:e0:50:7c:5a:a6:18:
91:da:d3:b7:56:ca:0a:45:b7:28:46:25:79:67:c5:8c:47:68:
42:cb:d6:b7:76:80:0f:64:28:8f:e1:29:3f:eb:44:7f:3a:3f:
67:45:8a:5f:a9:89:be:6a:1a:35:c4:00:20:52:4f:78:0f:f6:
54:f7:58:5a:dd:f7:84:63:54:20:ed:fd:7f:0f:1e:eb:7c:26:
bb:43:54:79:c4:2e:1c:76:4a:23:55:5d:d9:02:a9:26:2c:bb:
91:85:91:d9:c4:dd:3f:45:05:b5:32:ae:5d:12:c2:d3:19:d5:
17:2f:9f:26:6a:3f:3b:79:fd:62:bb:e2:d5:fe:c5:c3:66:7e:
06:16:c6:46:bd:06:c6:0a:0b:ca:dd:cf:3c:07:55:66:fe:d8:
ab:b1:c0:23:df:88:33:87:7c:85:84:44:12:6d:1d:90:81:c1:
32:d7:4c:03:ac:57:01:e3:93:ac:1a:db:cd:33:09:ba:af:8c:
7e:37:6b:70:a8:8c:f6:a5:92:ec:ae:96:3b:e9:08:35:af:29:
35:64:76:b9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUGxgGf5mQxcl/TdDmNHMefhfsmN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTkwMDAwMDBaFw0yNDEyMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxNWNjMTk5ZTc5Y2NkOGMwZjY4ZjRkOGM1OTAwYjg4ZmJkNzQ3ZDk3MGJh
NGVjOTZjMjYwNzhlZjZhNzkzZWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALB8YLa+4T+koqEJ0jPHHHAL6W2OS7TSh1j86Etb+1vVe5q5UVyAfiRGsY5w
OeoPGjL5yI44nmqrqjFmuOtKuDh87FjBPOw6JqlHWi1HzSUdTJn20YbYgljKEU0O
uoEQsJSAloHFUzaQ4WfeRPl4WMtGv1CS6mTT094tjbNU3Oq3WFPBOzBKK0V+xkhb
VqtY0BN5+KiYyzwnF5dI4zK5axJhpqTMRn9zteZkSaTO+jjfLB+DohvNnHc0RnOn
rzwvLtrCIGrbk4STD6Duk2t4EtGwzclW0xXoA+P/AEf1Zovu+OMTpSdKc3VubdEB
RcO69I8S8F0mYtnGgzYvlCVYaD8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSJK0ti
T/dK8d7PfBdQftjxCvyQVzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODhiYTNkMzAtMTU3ZC00OTY0LThmMWQtZmI4Zjk3MjZjNDBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNgMA0G
CSqGSIb3DQEBCwUAA4IBAQDAG2QOf5NPZ7q3LleQeJ7pBHg8VtcHfa2MxqbMIi1j
lWEED1F9jnWP76fvw0FMI1PgUHxaphiR2tO3VsoKRbcoRiV5Z8WMR2hCy9a3doAP
ZCiP4Sk/60R/Oj9nRYpfqYm+aho1xAAgUk94D/ZU91ha3feEY1Qg7f1/Dx7rfCa7
Q1R5xC4cdkojVV3ZAqkmLLuRhZHZxN0/RQW1Mq5dEsLTGdUXL58maj87ef1iu+LV
/sXDZn4GFsZGvQbGCgvK3c88B1Vm/tirscAj34gzh3yFhEQSbR2QgcEy10wDrFcB
45OsGtvNMwm6r4x+N2twqIz2pZLsrpY76Qg1ryk1ZHa5
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:39 2024 by rpki-client on console.sobornost.net