Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
File: a15337be-3f91-4e80-a89d-26de9d37ed80.roa (raw, json)
Hash identifier: zl2UrokfcMa2auU+rLXZLrZKmgXOt6+ay8L4UxcrMDY=
Subject key identifier: 5B:3B:3C:EA:5D:80:F7:E1:47:95:25:8F:51:A3:E7:ED:C8:9B:1B:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0DBC91A27BD3DD3204AEA7D230FF88707BA06587
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.0.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bc:91:a2:7b:d3:dd:32:04:ae:a7:d2:30:ff:88:70:7b:a0:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=d53be60130688a8cdf5f5049517d7edba4ab8138535e142140cc64a5579dedcd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:e6:d4:d9:5c:c0:af:d9:a8:fd:a5:86:5a:
81:b7:78:e8:d5:e6:91:b6:5e:9c:48:b1:0a:12:c3:
38:1e:ba:51:c2:3f:9a:80:8a:3b:ce:d0:c3:ce:2f:
09:8a:db:c7:02:79:55:d9:cf:8d:af:eb:6c:b8:2b:
19:87:1b:b7:42:d4:26:59:a3:24:63:3a:3b:0a:02:
a0:88:c6:96:a0:5b:23:53:e7:81:49:83:9a:08:1b:
3c:63:da:74:72:b4:15:92:47:b5:3e:ed:d7:c7:33:
6e:71:2d:02:90:f8:44:27:41:fb:d8:13:3f:a7:a8:
44:b2:b7:19:a8:39:10:0b:ed:af:76:f0:e3:1a:4d:
38:54:e9:65:f1:23:5b:74:7f:1d:fa:f4:04:34:c0:
a0:37:d7:d7:e7:59:17:e5:69:f4:d1:33:d8:02:7e:
4e:e5:e8:ab:75:d7:f7:79:cf:1a:ed:34:81:c7:60:
00:8a:da:34:cf:ec:04:9f:08:14:9c:5c:02:88:b2:
54:28:48:3a:a1:e2:1e:1e:c6:63:e5:0c:c6:a0:dd:
4e:c9:0d:36:3b:e1:e9:cd:75:63:38:61:44:1c:fd:
70:cb:7b:40:61:e8:16:08:ac:75:05:a4:8d:22:28:
4d:58:15:3b:6a:b2:b5:81:55:d8:6f:0e:b3:55:46:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:3C:EA:5D:80:F7:E1:47:95:25:8F:51:A3:E7:ED:C8:9B:1B:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a15337be-3f91-4e80-a89d-26de9d37ed80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
97:0d:13:94:b9:72:22:60:da:f3:f8:c1:1c:d6:c9:16:2e:ce:
18:a3:ec:bc:12:ff:d9:7b:3a:82:56:73:9a:96:db:6c:e4:ed:
28:42:f2:0b:ed:18:52:6a:81:11:2a:84:c3:39:12:fc:04:35:
e4:63:f6:bd:8d:e4:aa:18:b4:79:ed:19:46:bd:03:9e:e5:fe:
45:52:4f:8a:52:77:5c:02:56:c4:47:2b:20:3a:e1:b1:8a:8c:
02:28:c5:90:34:fc:f7:68:b7:98:f5:48:3a:f2:78:d3:d8:58:
be:f3:1a:84:8b:76:53:01:e0:8e:f3:af:88:2a:e1:73:7a:5d:
25:61:cf:a5:e9:65:cd:af:9e:45:44:06:21:0b:32:3a:27:1a:
6f:f8:26:73:26:f4:78:da:b5:a3:01:29:82:ab:6e:50:4a:ff:
1e:59:ac:a8:fc:bc:75:b1:50:3d:f6:3f:71:94:1b:0c:d8:aa:
77:99:c4:72:a6:63:c6:1f:9f:2a:b4:83:9b:7d:70:eb:99:95:
05:34:14:08:57:58:c1:76:02:cc:b2:71:4a:7f:44:dd:99:1a:
15:ea:da:57:1f:97:2d:1a:09:80:cf:1f:47:47:2a:7a:06:c6:
ad:0d:ba:44:be:4a:3b:ef:db:3b:ca:66:e4:e6:1a:f6:c3:6a:
13:b0:40:99
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDbyRonvT3TIErqfSMP+IcHugZYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1M2JlNjAxMzA2ODhhOGNkZjVmNTA0OTUxN2Q3ZWRiYTRhYjgxMzg1MzVl
MTQyMTQwY2M2NGE1NTc5ZGVkY2QxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPgs5tTZXMCv2aj9pYZagbd46NXmkbZenEixChLDOB66UcI/moCKO87Qw84v
CYrbxwJ5VdnPja/rbLgrGYcbt0LUJlmjJGM6OwoCoIjGlqBbI1PngUmDmggbPGPa
dHK0FZJHtT7t18czbnEtApD4RCdB+9gTP6eoRLK3Gag5EAvtr3bw4xpNOFTpZfEj
W3R/Hfr0BDTAoDfX1+dZF+Vp9NEz2AJ+TuXoq3XX93nPGu00gcdgAIraNM/sBJ8I
FJxcAoiyVChIOqHiHh7GY+UMxqDdTskNNjvh6c11YzhhRBz9cMt7QGHoFgisdQWk
jSIoTVgVO2qytYFV2G8Os1VGWX8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRbOzzq
XYD34UeVJY9Ro+ftyJsbkzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YTE1MzM3YmUtM2Y5MS00ZTgwLWE4OWQtMjZkZTlkMzdlZDgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTMAIDAN
BgkqhkiG9w0BAQsFAAOCAQEAlw0TlLlyImDa8/jBHNbJFi7OGKPsvBL/2Xs6glZz
mpbbbOTtKELyC+0YUmqBESqEwzkS/AQ15GP2vY3kqhi0ee0ZRr0DnuX+RVJPilJ3
XAJWxEcrIDrhsYqMAijFkDT892i3mPVIOvJ409hYvvMahIt2UwHgjvOviCrhc3pd
JWHPpellza+eRUQGIQsyOicab/gmcyb0eNq1owEpgqtuUEr/HlmsqPy8dbFQPfY/
cZQbDNiqd5nEcqZjxh+fKrSDm31w65mVBTQUCFdYwXYCzLJxSn9E3ZkaFeraVx+X
LRoJgM8fR0cqegbGrQ26RL5KO+/bO8pm5OYa9sNqE7BAmQ==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net