Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8a2d5f28-0fcb-419c-a873-3933dd3409d0.roa
File: 8a2d5f28-0fcb-419c-a873-3933dd3409d0.roa (raw, json)
Hash identifier: 1NMhSX0mnURvNuH/eezhVycK8UFEkOk8Log6VaeL/2M=
Subject key identifier: C1:68:40:E4:40:AA:EF:E4:DF:ED:2A:7A:34:F1:84:F7:7F:7D:53:81
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6BDFE5EB1A890633AAC55F5A2BDACCCEDC645339
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8a2d5f28-0fcb-419c-a873-3933dd3409d0.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:df:e5:eb:1a:89:06:33:aa:c5:5f:5a:2b:da:cc:ce:dc:64:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=a0e1589cc42ccfa0796728698ce11050623530f227f1264dd03b1e52ec394c05, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:29:09:e9:4f:c4:87:d7:d7:83:da:ca:ab:
06:c7:fc:62:4a:27:ba:fd:d5:17:39:58:6f:26:87:
3e:05:dc:b6:41:df:bc:0f:8e:0d:e2:21:95:9b:86:
ab:bc:9d:17:8b:67:6c:9c:23:66:bc:d5:8f:01:11:
fa:d9:f1:a1:d1:57:1d:71:63:71:e5:74:6e:eb:52:
fa:4c:5c:69:f8:c9:f4:6d:f2:ce:90:91:0f:da:b0:
29:cc:ab:58:1a:2b:eb:25:48:2a:f8:c3:3c:dd:84:
85:af:51:29:7f:b7:40:cf:1e:2e:66:e6:6d:3d:5c:
f0:89:00:4c:57:b7:52:1f:8a:97:9b:62:4f:61:41:
cd:80:1a:c2:a2:e4:5e:c6:6e:28:a6:8c:df:97:ef:
fe:49:85:6a:1d:00:80:5b:df:46:a9:74:ae:28:01:
c5:bc:66:16:5d:6a:db:08:e6:bc:b4:1b:fb:c7:75:
70:b1:35:26:e3:6a:10:49:2e:b2:4f:00:f0:0f:a4:
65:65:60:0d:13:31:30:39:66:3b:82:e3:a8:04:29:
4e:9d:3f:c6:ff:42:72:e9:40:83:f3:89:fa:11:ec:
0d:b6:f5:b0:3e:82:75:94:c0:ad:9c:9f:61:fb:d1:
2f:55:20:be:3a:28:b5:0e:ce:f8:fe:db:bf:1d:27:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:40:E4:40:AA:EF:E4:DF:ED:2A:7A:34:F1:84:F7:7F:7D:53:81
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8a2d5f28-0fcb-419c-a873-3933dd3409d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
31:91:a1:d4:bb:a8:6c:36:c4:02:5e:4f:54:93:7d:b2:6a:75:
5d:05:ee:d9:66:63:bd:87:21:34:9c:b2:bc:2a:0a:4d:0c:0a:
cb:c0:f6:0d:68:67:4b:94:b9:92:60:9a:22:bc:96:22:23:13:
24:e9:15:ae:a1:0e:32:68:d4:54:0a:00:48:37:23:b5:7e:3d:
a6:9b:e2:9a:7e:0a:33:48:df:19:36:3f:3f:b5:b6:79:30:a0:
fd:b8:7f:d7:0d:3e:3a:fb:74:58:5a:cb:33:42:a0:79:57:2f:
dd:f3:db:d8:02:7d:25:90:6a:5f:de:04:e0:c2:e1:ae:bf:85:
d3:23:78:f3:97:5e:71:a2:bd:08:cb:84:81:f4:61:48:61:fd:
ce:fe:bf:9d:d3:68:5c:ef:ad:c4:27:72:a4:59:0b:4f:67:f9:
28:d1:9a:07:7d:de:8d:1d:3e:f4:ac:7c:93:ff:88:a2:23:b6:
b2:5b:44:43:88:40:c0:86:8b:1b:c7:7d:59:24:08:b9:7c:b4:
7e:cc:45:2e:c1:6b:85:9b:0d:58:eb:db:9a:d4:95:7e:5b:e9:
42:90:7b:24:09:a2:e3:5e:8b:b7:75:ae:7d:ad:24:fd:37:70:
37:fc:0e:9e:38:d7:64:f7:7d:00:cf:87:37:a9:aa:08:e5:96:
f5:9d:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net