Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95922c65-906c-414e-8807-a0500d403602.roa
File: 95922c65-906c-414e-8807-a0500d403602.roa (raw, json)
Hash identifier: fX5WKqpKNXOHDP3eJJIUItEqLJnE4IrzUUAGoXpUtW0=
Subject key identifier: FD:47:FE:6E:D5:EE:B2:E4:4C:70:9C:3C:1E:3D:10:F7:79:02:CD:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 45988B4DE07ADE507134B3A82C2A38424CA6C3BE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95922c65-906c-414e-8807-a0500d403602.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:98:8b:4d:e0:7a:de:50:71:34:b3:a8:2c:2a:38:42:4c:a6:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=8652228098e88539b20e7cd5c11f9693b7b6c3ec52da311b07a61828ef8ac053, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:ca:4b:aa:07:30:ca:9f:ea:09:95:1f:fa:
53:5c:e5:f2:b3:81:5a:99:d0:1b:a4:6d:fd:e5:b6:
dd:09:23:18:44:2b:55:b0:a3:ab:7c:8e:5b:88:46:
f2:11:d2:60:3e:96:a4:82:4e:04:bc:e9:fa:2d:31:
5a:95:db:c9:eb:46:4e:4e:a5:90:93:69:ae:c6:8d:
77:19:b9:c8:80:8a:a5:7e:7a:dd:1f:8f:5a:a8:d1:
b7:92:8e:08:52:dc:ea:1a:cf:79:36:c1:27:a1:45:
8f:48:51:6e:2f:7c:aa:cc:a2:f9:e0:cf:53:b7:c4:
4d:1c:08:7b:14:ef:10:8a:0d:7d:d1:3b:a8:ea:bd:
d4:9f:0f:7b:08:19:07:31:cc:46:75:13:73:68:45:
b6:78:51:59:30:77:55:1c:a9:1c:7a:c1:f9:d1:51:
de:b3:cf:48:c3:9e:33:1e:c7:bf:d8:8c:46:38:c8:
d2:1d:93:b2:b9:81:49:c8:be:1c:ed:24:fe:bb:ff:
a1:90:63:c3:71:ad:e2:1f:5b:c0:d7:47:57:be:7d:
9d:c6:c9:9f:0b:15:0a:14:0b:4f:d0:91:90:c1:26:
74:11:b0:af:e7:9f:89:e6:2e:7b:04:ac:b8:64:73:
9d:d2:bc:06:e5:ba:e9:86:c9:d3:cb:1d:1b:50:58:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:FE:6E:D5:EE:B2:E4:4C:70:9C:3C:1E:3D:10:F7:79:02:CD:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95922c65-906c-414e-8807-a0500d403602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:c1:86:dc:3a:6e:35:96:ad:79:cf:2c:20:b6:ec:8d:10:1a:
7c:fd:1d:a9:b6:a6:20:2e:4d:5c:6d:97:3f:76:1c:48:3f:5e:
01:36:5b:a5:f3:8d:1b:5b:27:a8:37:25:ae:48:bf:fd:7e:70:
ed:56:07:ea:c2:59:de:af:d1:50:6e:61:df:85:6a:de:9f:6c:
89:9f:fa:6f:90:7f:83:19:5b:83:13:c8:ff:88:a9:f2:ac:c4:
43:13:75:c0:58:c2:68:0f:2b:07:5d:d7:73:81:fb:86:43:6a:
ee:d5:0a:e7:b8:c4:6f:00:fd:68:4f:46:fd:7a:5e:9f:b9:83:
b3:16:43:6e:61:c9:98:a1:89:26:f8:b8:57:ca:e9:8b:bd:01:
c8:9c:90:b8:e9:27:d1:9c:72:e9:43:b1:56:21:40:bb:e4:a8:
ff:c1:ee:3c:90:4f:0c:20:1d:bf:82:4d:ea:bd:fe:9f:69:5d:
e0:55:54:08:cc:8c:85:35:bc:52:71:67:04:8f:95:d2:72:35:
7a:89:eb:c2:07:1e:da:17:3a:c7:b0:6b:fe:99:50:1e:17:93:
7d:a8:23:bc:07:be:16:ed:81:ba:55:cd:a2:1c:4a:97:22:b4:
3c:11:8b:09:d3:7b:87:bf:09:c4:c2:a3:e9:56:8d:a3:5d:22:
e0:a0:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net