Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8df5aab7-a216-44a9-8516-a0faa3f4bf05.roa
File: 8df5aab7-a216-44a9-8516-a0faa3f4bf05.roa (raw, json)
Hash identifier: FiEarp6OoivO4tewwyeh4B54GJtg57h+NJwtzKUPpQU=
Subject key identifier: 2F:22:64:4C:00:01:49:3F:72:6E:23:46:86:24:C6:D3:92:73:30:7A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 726B5C20C5768F27A7F967978AE9AF17385C1BD3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8df5aab7-a216-44a9-8516-a0faa3f4bf05.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.192.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6b:5c:20:c5:76:8f:27:a7:f9:67:97:8a:e9:af:17:38:5c:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=92ff94075ea593d2c37d4178aff694311f5d7e7e322f8ecebee89f924b2922de, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:e3:e2:ae:8c:b8:3a:4c:a9:11:d5:4b:02:
93:49:55:31:8f:4c:b4:a7:6e:ff:41:f3:2d:73:87:
7f:28:20:07:c0:af:bd:8b:47:55:74:a9:ee:a2:89:
23:67:74:1e:e7:70:da:be:d0:f9:38:22:c0:2b:35:
9b:cc:81:a0:6e:2f:13:a3:31:b0:3e:3b:9a:55:99:
08:89:bd:3f:0d:2a:94:62:f6:a6:32:c2:ec:59:0f:
a0:04:09:ab:db:f1:40:b8:e3:fb:0c:d9:98:fc:e1:
2c:75:3a:7b:a5:cf:78:25:5f:3d:ba:a6:53:f0:5f:
6e:9c:62:d6:89:9d:3f:e0:97:d6:2d:15:e2:52:c1:
b1:b6:7f:cc:5e:88:eb:ee:4f:46:63:10:f3:8c:a7:
2f:c4:ea:5c:cc:8c:c6:d8:49:83:60:c0:b5:df:19:
be:4e:d3:66:d6:3c:a2:e7:5b:43:b7:10:c3:12:0b:
48:fc:d9:be:01:de:ed:2c:a8:61:20:4c:a3:30:a9:
83:51:c2:fc:80:4c:9c:3d:e2:43:9f:44:d6:7e:de:
cd:f0:7c:66:24:30:d3:8b:e3:4a:af:c8:f2:b3:27:
fe:4f:da:af:69:84:cb:a5:cb:9c:ca:12:57:a0:51:
bd:3c:6b:e8:f3:fb:82:91:1a:1f:87:89:29:cc:65:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:64:4C:00:01:49:3F:72:6E:23:46:86:24:C6:D3:92:73:30:7A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8df5aab7-a216-44a9-8516-a0faa3f4bf05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0e:f6:a5:21:d8:d2:b6:83:e0:aa:61:56:86:33:fe:72:19:66:
61:a1:9a:e0:fb:00:70:4c:a2:84:a5:2a:b9:d0:b5:77:ac:fc:
4a:ed:37:7c:95:ae:6a:48:6a:5c:eb:c2:f0:63:bd:4d:95:fa:
15:60:64:71:7b:f0:15:96:12:d2:d3:8c:e1:31:bf:ee:47:dd:
4e:6c:b7:16:84:a3:8c:b5:7c:e2:fb:09:b1:72:a6:2e:72:44:
be:e8:d3:77:ae:8b:5d:eb:ab:16:09:66:ee:ac:8e:02:69:38:
cf:7e:7a:fd:0e:1d:d5:55:3e:90:56:bf:f6:3b:79:57:af:09:
ca:e2:9a:10:dd:2c:85:ce:80:33:3a:8f:47:f2:dc:9a:8f:06:
34:c9:25:7d:c4:cf:07:10:c3:de:ce:d7:49:c5:e5:0c:31:04:
cb:c6:e1:6e:1c:03:5f:70:0e:ca:c5:64:a6:2b:6a:65:eb:29:
c1:c9:9d:0a:15:55:c0:af:e6:5e:11:a9:66:d4:9e:c9:3a:d5:
00:ed:a6:57:d0:d2:b6:a2:f1:b8:0b:58:48:50:2e:c2:0b:98:
56:59:e4:e0:0a:bc:f7:24:8b:a6:c9:33:7b:28:05:24:08:dd:
cc:64:4c:40:6b:4d:d3:cc:cd:34:f1:bd:d3:33:09:5f:be:c8:
2e:2f:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net