Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa
File: 94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa (raw, json)
Hash identifier: ZvbQW7vrMGipXMzloVOKXYY0m2sv1TchUMHIyi/JBrQ=
Subject key identifier: B7:F4:0D:97:C5:4C:05:E7:D2:2B:C6:E3:BD:91:26:8F:D0:12:61:E4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 17A8FA909AB739C4D1CD6AF7954238BA719C6C8B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a8:fa:90:9a:b7:39:c4:d1:cd:6a:f7:95:42:38:ba:71:9c:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=10dfb3aed81905253111e1cb3b85cdca5790a39a95db20cff0c06ef60b3bfb9d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:66:c7:39:e2:47:d5:27:9b:47:9e:0b:05:
72:e0:b6:42:3b:4e:fe:63:3a:23:a6:fe:2c:ce:1f:
82:dd:2e:8d:98:d3:85:1e:40:51:29:cf:80:85:99:
7c:c9:2c:6e:87:1a:66:a8:36:1a:4d:5a:3a:91:21:
7c:12:f5:6b:d2:df:43:9f:f8:2b:93:59:fa:f2:39:
34:e3:8a:18:cf:4e:b1:8d:9e:57:11:ec:d8:c4:2b:
dd:7c:a3:b0:c3:13:ca:42:2c:23:b7:5a:07:92:b3:
28:2a:56:81:ac:f9:f4:ef:44:7e:f6:43:44:cf:5a:
a6:26:da:9e:88:7f:56:5a:3a:51:6c:99:68:fd:2f:
2a:0c:57:9b:8d:3d:5c:3b:7d:59:61:9e:91:ce:6b:
f5:99:64:40:70:cb:99:22:09:91:65:15:1f:91:f0:
0e:26:54:73:0b:61:6c:fd:fc:58:e2:cb:8c:33:9d:
7a:3e:55:52:e2:2e:0c:12:10:e4:03:50:d7:cb:74:
a6:11:24:29:ee:2e:71:5b:0a:26:16:61:cf:e0:db:
85:5c:25:7b:58:f9:8e:a7:f5:4f:d2:73:d4:d9:70:
8f:8b:ea:c4:c2:62:d3:42:63:28:bb:fd:4d:c1:0a:
d0:34:ae:ff:b9:6a:3f:f7:de:3d:86:27:21:7b:0c:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F4:0D:97:C5:4C:05:E7:D2:2B:C6:E3:BD:91:26:8F:D0:12:61:E4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94b06b84-0447-4cc6-8cef-66e65fc52a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7c:bf:52:09:e4:95:30:3e:19:1e:4b:eb:09:04:ba:89:bf:74:
b8:a8:76:1b:2e:f6:41:1a:53:89:f5:ec:1e:04:7e:08:db:ec:
5f:ee:f5:6b:72:6f:27:d6:d5:6e:94:2f:29:17:47:95:c6:b8:
2e:7c:10:0e:6d:ee:e1:87:59:da:58:08:5c:ea:9c:b1:c1:30:
4f:a6:66:51:35:e8:8f:40:e8:dd:a4:58:cf:77:7e:4a:7b:33:
23:35:70:93:4c:01:b8:92:bb:85:1d:f3:ac:b3:80:67:34:19:
42:a9:2e:9c:43:ed:08:d9:22:e8:cb:cb:3a:46:61:93:64:ae:
8c:b9:a8:98:b4:2f:f1:cb:d2:f2:01:17:f8:a5:68:53:a3:9b:
8b:b3:72:e6:a3:92:e7:e4:12:0f:6a:f4:8f:9c:59:6f:76:e1:
a4:8e:c2:65:90:6d:b2:7f:5a:3f:ee:64:28:01:92:8e:38:89:
85:1b:32:a6:07:56:4c:99:a3:c7:1d:96:dd:4b:3b:80:16:ac:
15:97:91:e2:15:17:0e:51:1d:cd:65:e2:c1:38:76:9c:8d:31:
d8:0e:f1:5d:99:0f:c7:c4:8f:14:24:ce:52:6f:6f:9b:e3:82:
9b:c7:02:ea:f4:7d:ff:ff:49:ff:bd:4b:a9:86:49:ee:e0:6a:
37:5c:7d:af
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUF6j6kJq3OcTRzWr3lUI4unGcbIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDEwZGZiM2FlZDgxOTA1MjUzMTExZTFjYjNiODVjZGNhNTc5MGEzOWE5NWRi
MjBjZmYwYzA2ZWY2MGIzYmZiOWQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKESZsc54kfVJ5tHngsFcuC2QjtO/mM6I6b+LM4fgt0ujZjThR5AUSnPgIWZ
fMksbocaZqg2Gk1aOpEhfBL1a9LfQ5/4K5NZ+vI5NOOKGM9OsY2eVxHs2MQr3Xyj
sMMTykIsI7daB5KzKCpWgaz59O9EfvZDRM9apibanoh/Vlo6UWyZaP0vKgxXm409
XDt9WWGekc5r9ZlkQHDLmSIJkWUVH5HwDiZUcwthbP38WOLLjDOdej5VUuIuDBIQ
5ANQ18t0phEkKe4ucVsKJhZhz+DbhVwle1j5jqf1T9Jz1Nlwj4vqxMJi00JjKLv9
TcEK0DSu/7lqP/fePYYnIXsMRnkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS39A2X
xUwF59IrxuO9kSaP0BJh5DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OTRiMDZiODQtMDQ0Ny00Y2M2LThjZWYtNjZlNjVmYzUyYTZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPsMA0G
CSqGSIb3DQEBCwUAA4IBAQB8v1IJ5JUwPhkeS+sJBLqJv3S4qHYbLvZBGlOJ9ewe
BH4I2+xf7vVrcm8n1tVulC8pF0eVxrgufBAObe7hh1naWAhc6pyxwTBPpmZRNeiP
QOjdpFjPd35KezMjNXCTTAG4kruFHfOss4BnNBlCqS6cQ+0I2SLoy8s6RmGTZK6M
uaiYtC/xy9LyARf4pWhTo5uLs3Lmo5Ln5BIPavSPnFlvduGkjsJlkG2yf1o/7mQo
AZKOOImFGzKmB1ZMmaPHHZbdSzuAFqwVl5HiFRcOUR3NZeLBOHacjTHYDvFdmQ/H
xI8UJM5Sb2+b44KbxwLq9H3//0n/vUuphknu4Go3XH2v
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net