Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/93fb8cf7-eb5c-4c22-89ab-1cabf9c9d510.roa
File: 93fb8cf7-eb5c-4c22-89ab-1cabf9c9d510.roa (raw, json)
Hash identifier: Bq9i1xsaYyyn2qSBpcnG9+cIAJCSSKxRKGeHUOtEG6Q=
Subject key identifier: 30:C0:A2:D7:B1:7F:D8:52:DA:B8:D5:52:BA:60:38:0E:3F:0F:D3:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1A3946C03A86CB60274B4A9C9DD585BCF9DA9270
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/93fb8cf7-eb5c-4c22-89ab-1cabf9c9d510.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:39:46:c0:3a:86:cb:60:27:4b:4a:9c:9d:d5:85:bc:f9:da:92:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=02592be6b21a7531c604f576672af20b417f54ca08cebd42af5f72b7321f92a2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:37:10:df:57:98:77:f7:66:3d:85:2c:95:
b0:28:8d:f3:bd:e4:dc:b5:d9:9d:d5:b6:ac:7d:91:
1a:4f:6c:66:80:91:34:fa:74:41:f6:5a:5c:9c:60:
dd:4f:7a:eb:51:19:20:61:83:e9:54:31:cb:40:1d:
49:2a:91:8e:7c:6f:bb:b8:4c:28:4f:a8:69:6f:5e:
4d:c5:9f:2e:99:52:fe:3e:41:c3:aa:0e:1c:62:3e:
71:96:2a:ad:aa:fd:57:c9:ee:8d:46:1d:6f:ce:b8:
5e:ff:b1:ec:69:1c:1c:85:89:91:d8:c9:87:48:0e:
68:32:9c:0f:7c:89:55:51:cb:19:58:90:f2:ed:20:
d9:bd:cb:4d:bd:56:ed:7e:3b:28:0e:ca:e4:2d:96:
2e:05:e1:0a:19:43:6f:38:03:4a:67:0e:eb:ec:8d:
2e:d7:7f:b2:4d:f9:ee:a3:7d:80:58:80:0c:f4:40:
6d:61:fb:f1:b2:2f:cc:c2:6d:ce:e0:5c:44:14:d7:
83:59:39:ab:d3:96:27:bf:9d:11:18:ed:b8:9d:4a:
3f:4a:20:99:f2:0a:f0:f6:e6:8d:b8:00:84:6f:26:
a0:9d:18:f6:47:a0:04:13:9b:56:70:7d:0b:37:d0:
14:4f:f4:6f:5d:b3:3b:48:2b:40:1e:55:c3:22:7c:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:A2:D7:B1:7F:D8:52:DA:B8:D5:52:BA:60:38:0E:3F:0F:D3:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/93fb8cf7-eb5c-4c22-89ab-1cabf9c9d510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:10:31:e6:62:26:6c:13:53:36:e5:cf:99:ad:3f:91:e7:6d:
23:96:6d:27:b7:bd:43:46:8a:da:40:17:e4:5f:6c:a9:11:a3:
46:12:01:cd:82:12:ed:9c:bf:28:63:ea:82:e6:3c:5b:dc:ba:
a0:ae:b6:1d:30:f2:57:8c:a5:af:4b:14:e0:37:5f:dc:7f:56:
5c:4a:33:1c:54:3b:35:d3:3c:aa:ff:51:e3:99:ef:28:5e:20:
fb:cf:d8:7b:c6:71:8a:7d:e8:7b:0b:80:f9:5d:36:af:5c:b6:
3c:78:34:5a:eb:1e:6a:1e:0f:9b:d1:7d:3d:a9:96:d4:56:e0:
d3:8d:b1:26:59:48:72:e8:c5:70:ec:ab:21:95:35:27:05:dd:
3d:b6:24:86:0c:54:ec:f6:c2:0d:a8:f5:22:a4:18:39:6b:4b:
53:a8:87:ff:72:e0:6f:b0:88:6c:3f:15:1f:14:09:00:fe:7d:
c5:9b:49:27:3a:a3:4e:5e:6f:27:28:2c:7a:21:3e:14:93:55:
20:f3:99:c1:b5:99:ae:36:20:fc:f5:e3:44:3c:9b:8d:78:e2:
07:13:96:bc:e3:69:8c:a9:0b:7c:e8:5a:28:76:e4:37:6b:1d:
20:5b:d5:92:4b:21:4f:b5:f0:6c:02:b3:6b:9c:b2:41:08:d1:
32:c8:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net