Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e551851-bfdb-4c50-93aa-d4c75481b843.roa
File: 8e551851-bfdb-4c50-93aa-d4c75481b843.roa (raw, json)
Hash identifier: GZik/v4RGld9FpwAh8F3B9E6kC38uHQNjle/s3X9ETI=
Subject key identifier: 49:A8:87:32:D0:83:3F:8E:33:F7:10:69:F1:20:11:C3:22:C5:6D:F8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 63D4A5C85D19525C8E527EE1F3C48A71BE86C2EF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e551851-bfdb-4c50-93aa-d4c75481b843.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d4:a5:c8:5d:19:52:5c:8e:52:7e:e1:f3:c4:8a:71:be:86:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=1ee5e86ad074ee6817250fd95d0f466843f540ba1d1452fb34003659503b6e9e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:85:31:7c:f1:87:83:7d:d4:0d:42:29:f2:
13:c6:e2:8f:93:c4:58:39:ef:3d:c8:e5:56:76:21:
f5:89:2f:62:dc:67:0d:e3:79:de:ea:78:25:34:3d:
33:8c:17:81:78:e7:06:c2:3c:4d:ed:31:d7:a1:ee:
cc:25:4b:01:5a:94:e0:a9:2c:9d:69:90:46:a0:5b:
51:f0:5d:7b:22:5a:bf:da:09:67:ce:72:30:3f:d0:
4a:c3:05:c8:03:14:c8:8d:bd:93:2d:8a:5d:a3:1e:
27:1c:a2:38:cb:08:4a:b3:85:f3:e4:30:cd:c5:7e:
4e:d3:74:db:d1:ff:7c:06:49:2f:29:0e:85:5c:ea:
75:b1:82:a7:30:c9:7b:fe:fd:63:44:de:69:6d:d4:
7e:ef:7c:33:e3:14:e6:7e:4b:44:3a:8b:4d:b2:3e:
0d:48:f1:7e:aa:88:b4:56:c9:30:84:18:48:16:a6:
29:e3:b1:3f:ad:42:11:8d:4f:e9:0e:01:41:9f:e1:
22:16:14:ee:7a:a1:df:df:04:8c:5d:4f:6c:ac:58:
b6:1d:c3:a6:b1:3c:2c:c3:86:40:89:ca:3d:72:6c:
5c:e1:1d:a1:8c:75:6d:f4:8d:c4:ed:eb:ca:0c:e0:
c2:11:f7:0d:5e:18:72:56:9a:cb:e9:01:01:a0:51:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:87:32:D0:83:3F:8E:33:F7:10:69:F1:20:11:C3:22:C5:6D:F8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e551851-bfdb-4c50-93aa-d4c75481b843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:88:9d:ea:82:4e:66:d8:ed:74:51:a7:2b:17:05:c3:f0:a9:
39:f8:ef:64:df:3a:e1:c0:0e:bb:3d:09:53:73:5c:1c:00:96:
c9:11:4f:42:9e:ce:e5:b6:9b:cf:53:f6:bc:b1:d6:41:f1:3b:
15:57:2f:c6:60:6d:b9:88:a8:4a:7c:0e:19:6d:f7:f2:1b:f6:
61:43:ca:52:ec:bf:d9:e0:ac:51:af:e5:f8:c3:73:cd:2f:82:
6f:90:5d:06:ad:68:68:2b:b1:51:c7:48:e1:ce:8a:10:25:63:
18:03:79:3d:95:37:a0:af:a3:4c:0d:98:05:c8:81:61:11:6e:
d6:c7:64:c1:0d:b7:a0:e8:15:10:12:ea:ea:f4:27:6b:b1:f7:
7d:40:5f:8f:15:94:8e:b7:de:e7:2d:e3:8b:20:2e:09:15:dc:
7a:01:51:94:7d:62:b0:cc:ba:ed:cd:92:fc:af:59:51:cc:db:
64:83:ca:53:ae:e8:58:63:a2:9e:25:a0:30:05:3a:48:5d:14:
50:b3:d9:89:6d:99:f0:b0:2f:18:50:59:59:ac:0c:af:61:df:
b3:a2:d6:94:25:78:73:02:ec:bb:5e:4c:c3:85:b1:11:8b:a8:
97:b2:41:f9:f1:60:ec:2e:96:50:11:d0:0a:89:23:7b:ab:f8:
fb:a1:bf:f8
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUY9SlyF0ZUlyOUn7h88SKcb6Gwu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDFlZTVlODZhZDA3NGVlNjgxNzI1MGZkOTVkMGY0NjY4NDNmNTQwYmExZDE0
NTJmYjM0MDAzNjU5NTAzYjZlOWUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWKhTF88YeDfdQNQinyE8bij5PEWDnvPcjlVnYh9YkvYtxnDeN53up4JTQ9
M4wXgXjnBsI8Te0x16HuzCVLAVqU4KksnWmQRqBbUfBdeyJav9oJZ85yMD/QSsMF
yAMUyI29ky2KXaMeJxyiOMsISrOF8+QwzcV+TtN029H/fAZJLykOhVzqdbGCpzDJ
e/79Y0TeaW3Ufu98M+MU5n5LRDqLTbI+DUjxfqqItFbJMIQYSBamKeOxP61CEY1P
6Q4BQZ/hIhYU7nqh398EjF1PbKxYth3DprE8LMOGQInKPXJsXOEdoYx1bfSNxO3r
ygzgwhH3DV4Yclaay+kBAaBRDfcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRJqIcy
0IM/jjP3EGnxIBHDIsVt+DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OGU1NTE4NTEtYmZkYi00YzUwLTkzYWEtZDRjNzU0ODFiODQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADN1MA0G
CSqGSIb3DQEBCwUAA4IBAQDBiJ3qgk5m2O10UacrFwXD8Kk5+O9k3zrhwA67PQlT
c1wcAJbJEU9Cns7ltpvPU/a8sdZB8TsVVy/GYG25iKhKfA4ZbffyG/ZhQ8pS7L/Z
4KxRr+X4w3PNL4JvkF0GrWhoK7FRx0jhzooQJWMYA3k9lTegr6NMDZgFyIFhEW7W
x2TBDbeg6BUQEurq9Cdrsfd9QF+PFZSOt97nLeOLIC4JFdx6AVGUfWKwzLrtzZL8
r1lRzNtkg8pTruhYY6KeJaAwBTpIXRRQs9mJbZnwsC8YUFlZrAyvYd+zotaUJXhz
Auy7XkzDhbERi6iXskH58WDsLpZQEdAKiSN7q/j7ob/4
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net