Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b135dbe-8c68-40c8-9510-c1daab9595af.roa
File: 9b135dbe-8c68-40c8-9510-c1daab9595af.roa (raw, json)
Hash identifier: 6Fuwv4Ay3GFfRtOABAJb33syz+3HxwjsrkQ538LyQZs=
Subject key identifier: FF:28:BF:2C:F7:0C:41:36:84:ED:A3:A6:80:06:53:E8:53:1B:0E:F8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2F26C390BD26B16A7F1AD446A236F1C868B2395A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b135dbe-8c68-40c8-9510-c1daab9595af.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.110.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:26:c3:90:bd:26:b1:6a:7f:1a:d4:46:a2:36:f1:c8:68:b2:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=af50af6108a7ace3d9c6fd69c3fbb90bb006a774c2b9e7be5fb351cf2ee07862, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:60:87:b8:fd:fa:1a:57:07:53:42:ab:27:
af:16:6b:20:c0:4e:6f:e1:a6:b0:0e:ac:84:c4:c3:
c5:55:85:ec:24:be:e2:8b:92:b9:6c:35:3d:fe:04:
19:bb:2a:5a:67:f4:d3:b2:14:c5:96:df:97:a2:9e:
32:15:6b:45:8b:a3:63:06:d4:7b:cd:ad:43:81:3a:
6a:8e:9c:f1:4b:10:12:82:4f:5c:84:71:bd:f8:5f:
db:fd:c4:ba:fa:d3:d0:55:1b:be:0e:e1:b4:c8:40:
19:99:61:ee:63:bf:f7:cc:1f:4e:6e:e2:ef:7e:1b:
a7:8e:b3:b0:c5:a6:60:ce:e5:4b:24:1c:4c:90:39:
fe:3f:87:3e:65:1b:41:17:20:ca:f4:95:b5:d7:20:
4e:7a:cf:c8:e7:27:64:a9:a1:6c:21:03:aa:a1:b2:
11:f5:6c:10:46:9a:94:74:fe:d8:c1:ad:df:4f:0b:
a6:82:97:91:ce:a0:9e:b7:40:1f:e9:a8:ef:80:10:
13:11:18:d4:55:46:ae:6a:4a:fb:c4:d5:bf:71:20:
53:5f:38:47:83:82:fb:6a:c2:e3:5a:b3:5e:93:be:
48:4c:c5:df:28:15:93:48:71:27:e5:cf:b0:c7:f5:
e7:3e:d4:dc:ac:3c:a8:5b:08:6e:c2:5f:fa:3c:e4:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:BF:2C:F7:0C:41:36:84:ED:A3:A6:80:06:53:E8:53:1B:0E:F8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b135dbe-8c68-40c8-9510-c1daab9595af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:ce:15:0e:6f:06:22:32:4b:62:03:a1:c2:b9:02:7b:86:f2:
80:7a:6f:6b:43:01:a2:6f:d1:0e:39:5b:a4:d6:73:6f:45:d9:
57:7d:0c:23:4b:ca:30:48:07:1e:c2:c2:13:18:75:90:4b:52:
26:b3:f3:2b:37:7a:68:fc:45:7a:a0:81:72:9e:53:b0:9a:ac:
03:a5:b2:59:e8:92:c1:dd:a6:c5:b0:05:55:66:ca:b8:22:c1:
af:e3:76:0f:14:43:7a:ca:2d:a4:4f:a6:c0:4d:37:9e:e4:1d:
8b:47:65:2a:98:2c:9b:d7:4c:de:2f:2b:45:56:77:f2:11:1e:
5c:d5:02:b4:a3:95:39:59:d3:60:2a:ae:9d:29:16:c7:27:d9:
2c:31:d7:90:06:ab:17:88:02:47:ac:47:a0:2c:20:d3:87:80:
4b:96:b4:02:4a:6a:bc:3f:f1:97:11:00:b5:dc:2e:0e:8b:be:
67:c6:29:18:47:af:5f:a2:0f:ae:04:2b:39:f7:79:f2:1e:9c:
2a:6e:7a:12:67:6a:73:1b:8b:72:cf:a7:87:1a:15:f6:ff:47:
c0:f3:c7:18:07:2e:d1:b2:3b:0c:3f:9a:8a:65:cf:aa:a5:8d:
ab:ea:6f:4d:3c:41:4f:28:f2:f6:04:8b:a3:64:e9:1a:63:10:
84:1c:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net