Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97a9749c-f933-42d6-a093-7bf3a4de27a5.roa
File: 97a9749c-f933-42d6-a093-7bf3a4de27a5.roa (raw, json)
Hash identifier: Gk9GrOl23U7igrOGvasKL6qFbyxaezKeJJDX9vjok6I=
Subject key identifier: F2:49:54:16:70:45:DC:54:D7:B7:EF:5A:66:6F:44:AC:A8:6B:B2:89
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 18D7CD9DA3B8CF679C2CC7F4C2CFFB781AD77825
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97a9749c-f933-42d6-a093-7bf3a4de27a5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d7:cd:9d:a3:b8:cf:67:9c:2c:c7:f4:c2:cf:fb:78:1a:d7:78:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6ba35a1fcb03ee90308a123365a66bf3aa1f00c57845be4d6ff7d15a0911c16f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:29:5e:b6:67:b5:a3:93:12:23:42:de:e7:
67:e7:f2:f4:de:7e:8c:6d:f4:ce:f8:49:6c:ae:d1:
93:fa:db:fa:48:94:2a:91:e4:3f:e8:d2:0b:5c:76:
5c:f9:b0:ba:7a:22:ec:d3:66:f4:79:fc:a8:69:6e:
c2:99:4a:03:78:b5:86:2f:49:66:6c:4f:a6:df:3a:
e5:8e:42:3a:96:4c:9f:ff:77:70:2e:64:e7:64:ce:
77:4a:0f:57:fa:da:0a:36:b0:4c:6d:e6:7c:76:5b:
61:86:04:48:02:5b:1f:71:36:13:d9:b6:cc:0e:6b:
4e:30:d8:e4:59:59:4d:46:45:f1:e2:3e:2d:2f:cc:
da:81:6c:03:d9:70:3e:db:1a:fe:64:80:40:45:b6:
fc:5e:46:45:f9:2e:1d:78:48:c6:f8:59:6e:2b:71:
26:f9:6a:3e:90:ec:58:be:0c:72:73:5e:05:ab:e4:
ba:59:86:c4:f7:5b:5a:af:5c:53:87:e7:44:75:1f:
0e:a2:a4:f0:53:ed:a2:8e:3c:39:39:f4:7f:43:3d:
2e:bd:d8:13:70:6f:a5:bf:f7:06:da:7c:ac:27:d4:
54:07:7b:2c:7c:e0:a0:ec:6b:90:37:09:93:7b:e3:
d7:c3:34:97:38:1c:b8:aa:1e:8f:ce:61:e8:9d:36:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:54:16:70:45:DC:54:D7:B7:EF:5A:66:6F:44:AC:A8:6B:B2:89
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/97a9749c-f933-42d6-a093-7bf3a4de27a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:33:29:04:60:c8:f6:0f:93:c8:75:18:7e:a9:23:cc:3b:39:
03:86:b1:f0:e0:d5:14:4a:d8:88:63:54:1e:77:9d:b7:cd:aa:
b4:2e:96:3b:ee:9d:b9:a3:fb:6c:ab:fe:25:21:ea:02:e7:2d:
cc:19:98:80:78:f3:64:36:54:ed:9f:97:ac:a1:65:05:b9:b9:
07:55:2a:b4:68:23:ba:85:99:dc:16:b0:c3:55:a4:f4:dd:b8:
41:51:02:17:f3:88:b5:e9:80:2e:5d:6e:c3:cc:60:22:32:3e:
3e:40:93:0e:69:8f:83:fc:cb:11:27:e9:36:e0:ea:f5:62:0b:
c0:4c:3b:d4:92:98:3d:7a:37:5e:65:48:a9:e4:32:6f:7c:6d:
e1:fd:06:48:5d:99:e0:98:8d:b5:4e:8c:9b:5f:b0:78:b9:6c:
d9:13:48:06:35:73:7e:2d:aa:8d:98:1b:99:41:5f:8f:0e:3f:
ab:f1:01:c2:bd:17:06:a1:ea:67:35:a8:44:a7:d0:b6:fd:e9:
31:2f:0d:f5:a2:6d:a7:de:9e:46:66:8a:51:70:f7:0c:e3:7f:
d4:6a:37:ee:72:7c:f7:b0:cb:be:31:e9:fd:11:89:1a:b3:f1:
63:2f:00:1e:18:12:78:3f:05:19:25:86:f9:1c:4b:bd:b6:db:
0c:5c:40:11
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUGNfNnaO4z2ecLMf0ws/7eBrXeCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiYTM1YTFmY2IwM2VlOTAzMDhhMTIzMzY1YTY2YmYzYWExZjAwYzU3ODQ1
YmU0ZDZmZjdkMTVhMDkxMWMxNmYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALugKV62Z7WjkxIjQt7nZ+fy9N5+jG30zvhJbK7Rk/rb+kiUKpHkP+jSC1x2
XPmwunoi7NNm9Hn8qGluwplKA3i1hi9JZmxPpt865Y5COpZMn/93cC5k52TOd0oP
V/raCjawTG3mfHZbYYYESAJbH3E2E9m2zA5rTjDY5FlZTUZF8eI+LS/M2oFsA9lw
Ptsa/mSAQEW2/F5GRfkuHXhIxvhZbitxJvlqPpDsWL4McnNeBavkulmGxPdbWq9c
U4fnRHUfDqKk8FPtoo48OTn0f0M9Lr3YE3Bvpb/3Btp8rCfUVAd7LHzgoOxrkDcJ
k3vj18M0lzgcuKoej85h6J02EFUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTySVQW
cEXcVNe371pmb0SsqGuyiTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OTdhOTc0OWMtZjkzMy00MmQ2LWEwOTMtN2JmM2E0ZGUyN2E1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNFMA0G
CSqGSIb3DQEBCwUAA4IBAQA6MykEYMj2D5PIdRh+qSPMOzkDhrHw4NUUStiIY1Qe
d523zaq0LpY77p25o/tsq/4lIeoC5y3MGZiAePNkNlTtn5esoWUFubkHVSq0aCO6
hZncFrDDVaT03bhBUQIX84i16YAuXW7DzGAiMj4+QJMOaY+D/MsRJ+k24Or1YgvA
TDvUkpg9ejdeZUip5DJvfG3h/QZIXZngmI21ToybX7B4uWzZE0gGNXN+LaqNmBuZ
QV+PDj+r8QHCvRcGoepnNahEp9C2/ekxLw31om2n3p5GZopRcPcM43/Uajfucnz3
sMu+Men9EYkas/FjLwAeGBJ4PwUZJYb5HEu9ttsMXEAR
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net