Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9bcb01bf-5e97-476b-b855-1bba036f903d.roa
File: 9bcb01bf-5e97-476b-b855-1bba036f903d.roa (raw, json)
Hash identifier: mOrnqj9DrFDaXQMsSJMVcxzTgdJZUbXnQKX4f/0kumE=
Subject key identifier: CF:C2:A8:40:CA:4C:AB:D3:52:88:B0:49:75:7E:BE:B3:B0:B4:E2:A5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3F2318917E027CE4CB513225BE4AC2279DBEB1EB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9bcb01bf-5e97-476b-b855-1bba036f903d.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:23:18:91:7e:02:7c:e4:cb:51:32:25:be:4a:c2:27:9d:be:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=4765249ad273ca9aab714722fc71f54de5bd40109e08aab79c6ea0b9b35431f3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:80:31:bc:b1:18:bb:e1:c1:92:f9:63:75:
48:50:d4:81:05:76:d3:75:12:bc:32:b6:05:08:8e:
bc:54:d9:dc:82:27:c7:d2:d5:42:44:b0:0e:36:b3:
06:59:76:6b:56:19:e1:23:22:e3:88:6c:43:1c:45:
30:3b:26:5e:fb:dd:ff:b8:c0:aa:f5:e0:c6:5e:59:
0b:99:9e:21:5e:1d:03:b9:32:59:5b:46:d4:7d:e6:
74:ab:9e:01:27:4c:83:13:45:4a:45:63:2f:90:d5:
75:0b:79:22:1a:e1:2f:9b:6c:7c:4d:85:4a:a8:2b:
77:d9:84:7b:7d:a3:3b:2b:c9:7f:c0:c4:cc:13:9b:
78:8f:87:9d:94:f5:01:5b:c0:14:66:f1:dd:a9:d9:
0d:bb:2e:24:4e:9d:17:72:e2:2e:6f:25:0b:dc:c8:
c2:b4:22:3b:b4:ff:a9:f3:6b:87:c6:c3:46:bd:c0:
d0:b2:a8:61:98:56:00:19:b3:a6:b9:85:7a:e9:32:
37:48:da:b4:d9:df:d3:8f:56:0c:dc:9c:90:26:d4:
aa:2f:43:2e:79:7b:55:ce:b3:0f:df:39:4d:c0:fa:
6e:23:45:09:78:b3:f1:bb:59:f1:34:02:98:2b:dc:
2a:7a:5b:83:40:f9:63:26:2d:47:c8:f5:71:da:f3:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:A8:40:CA:4C:AB:D3:52:88:B0:49:75:7E:BE:B3:B0:B4:E2:A5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9bcb01bf-5e97-476b-b855-1bba036f903d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:29:75:17:ae:e2:c6:6a:6d:c1:f7:8d:20:f2:f3:71:b3:f2:
86:e9:a5:20:3d:08:e7:44:c1:f3:5f:8e:b4:6d:8d:3d:6c:28:
cb:69:07:ce:93:7f:5f:c0:cb:5a:a2:05:9b:94:9f:d0:b4:f0:
c4:68:58:6c:3c:22:98:4f:31:0c:b4:a3:ab:4c:55:96:9f:66:
13:f4:6c:91:df:bf:15:75:e2:da:d7:0a:aa:8e:26:10:16:3e:
02:bc:67:ff:af:3f:13:cf:30:82:dc:e1:30:ce:8b:f0:f4:f0:
f8:48:d1:35:1b:4c:e0:6d:6e:f0:a1:2b:ee:5f:cf:d3:60:f4:
b0:22:e6:93:e9:08:66:ca:e4:2c:02:20:d4:ca:c5:e2:91:69:
c9:ac:d0:49:d5:e1:d1:51:a1:83:7a:9e:cd:f1:48:f6:be:0a:
fb:bc:79:23:3f:f5:07:ff:9e:c2:44:55:93:58:69:8c:97:b2:
da:20:05:9c:81:7c:5d:3e:bb:29:11:8d:da:3b:28:b4:d8:a7:
05:1f:6b:a5:af:8a:93:6c:c2:88:1e:24:ac:bf:45:96:23:d3:
49:94:2f:e6:b6:fe:9b:6e:08:9e:2f:ae:79:48:b5:eb:7d:7e:
99:ad:d9:3f:36:97:92:6c:58:06:fe:04:16:28:6c:d1:c3:db:
ce:2e:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net