Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e4eace2-a571-49f7-85f6-87ac18344a6e.roa
File: 8e4eace2-a571-49f7-85f6-87ac18344a6e.roa (raw, json)
Hash identifier: cahKJwB/qipa27kQEluDPa6Tro7IHvngf+3Eo8rMzt0=
Subject key identifier: 2A:7B:D4:E9:08:E4:68:79:7D:CD:BD:07:A6:D6:D1:13:DA:C9:92:23
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3A095988C7D4BCF046CA7FCA3067629BD1826A4C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e4eace2-a571-49f7-85f6-87ac18344a6e.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:09:59:88:c7:d4:bc:f0:46:ca:7f:ca:30:67:62:9b:d1:82:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=29840c50b1f0bfd8cad3b6d4f2c0b8cc26ae025f394ec041053eeddfc89acfc1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:e0:0b:9f:9b:f8:f0:25:80:b2:94:1c:8d:
7f:2c:d7:fd:1b:d6:c1:92:c6:79:a8:fa:d6:2b:4f:
f6:4c:1b:e6:84:47:e3:72:45:de:08:36:cd:15:cd:
a7:07:de:c1:9b:10:48:69:ab:4a:3e:6e:c6:bc:a4:
8a:65:54:3e:be:70:f7:29:be:fc:15:b1:d0:1a:b4:
28:30:65:6c:d0:13:38:a1:21:78:e4:dd:fd:23:4e:
4c:38:08:e5:ce:45:15:dd:61:83:a5:d4:fb:61:97:
dc:f2:cb:7e:bb:96:91:b6:b3:af:75:ae:5f:d6:cb:
3f:20:25:08:22:b8:d4:46:70:0a:ff:66:a6:06:55:
f0:5b:1c:e7:9f:a8:ce:e1:29:93:89:6e:f5:34:35:
01:7e:59:a3:b7:1b:d6:8f:7d:c2:6e:d8:50:77:c5:
82:ed:96:95:05:bd:bb:0f:b3:ee:af:bf:e7:29:83:
29:8a:d7:9c:cc:3a:8f:c4:2b:29:d4:ac:d7:ec:b8:
70:46:2a:ff:59:39:94:94:18:32:ad:d0:6c:8f:b1:
fc:b2:79:9a:58:45:ea:8f:6e:0a:e0:bd:05:ad:f4:
50:1d:fa:53:99:8a:81:f4:b4:ed:c8:98:16:59:08:
0c:4d:c1:0e:a2:c2:cd:d7:53:77:99:b7:77:49:f3:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:D4:E9:08:E4:68:79:7D:CD:BD:07:A6:D6:D1:13:DA:C9:92:23
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e4eace2-a571-49f7-85f6-87ac18344a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:06:e4:83:ad:86:88:74:39:ca:db:9b:8c:55:2a:e1:37:16:
ca:6f:00:3c:53:b5:bb:08:22:fd:b6:91:cf:84:0d:cf:ef:cf:
f0:46:27:f6:64:2c:10:3c:8f:06:9f:a7:4b:12:04:80:69:50:
d9:a4:45:79:c1:bb:f4:fd:57:85:2a:f6:48:88:f8:dc:7d:a0:
c1:a0:2d:83:e7:52:26:e7:c0:9c:1e:fd:ba:6e:29:1f:c1:98:
f4:04:0c:21:17:61:e9:b5:4b:1d:cf:49:8c:5b:e8:26:e0:f9:
f1:e6:14:3b:a8:c9:3f:7d:f5:50:94:78:9d:8a:bd:9c:8e:06:
a2:a7:84:64:b8:53:8c:a2:12:4c:69:2c:4a:b2:98:ca:76:c8:
ac:d0:b9:75:d3:60:54:af:1f:70:93:cc:28:4b:95:66:e9:e0:
d0:06:c6:b2:8a:7f:71:30:be:4b:e2:70:7f:44:50:df:84:14:
92:75:28:23:82:0a:a0:db:99:1e:4b:bf:c0:79:b2:8c:60:6a:
c6:5d:d3:ca:8f:7c:1a:4e:8c:54:bf:94:32:7e:85:2f:4a:19:
92:6f:3b:78:84:5b:92:c8:63:f1:f0:4d:9f:f9:9e:cd:2f:b5:
f7:07:3d:ff:4c:51:8d:51:00:a0:3d:5b:f8:37:94:8e:7a:d4:
37:ea:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net