Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2ec30ed-974a-43a5-b46e-c1e08243cbdb.roa
File: a2ec30ed-974a-43a5-b46e-c1e08243cbdb.roa (raw, json)
Hash identifier: T2Wtzlb/42HewDp8l1FRxmhdLE+a7cWTR6uCNQhMcaQ=
Subject key identifier: CD:43:C7:2E:F4:EF:48:C2:F5:62:AE:DF:2B:53:80:70:62:9F:CA:2B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 341A7C656FC1E873FC603F21A0B4254FEB7F009B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2ec30ed-974a-43a5-b46e-c1e08243cbdb.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1a:7c:65:6f:c1:e8:73:fc:60:3f:21:a0:b4:25:4f:eb:7f:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6ff51db13cfa466c65493947ae71b61d55433e78a98e58d4b99603d7b47f7167, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:f8:f4:16:63:c2:f9:3a:87:ef:3e:85:63:
cd:a1:82:5b:3b:fd:a8:9c:61:e4:ec:98:ae:03:42:
4d:df:e5:52:d8:ad:ff:a1:ea:ed:f0:be:c4:7d:a9:
80:31:19:43:75:7f:0f:f7:73:e0:af:5c:05:a5:6d:
26:64:44:b6:08:d1:10:47:ba:7f:ca:fe:af:57:5f:
98:5f:0f:2b:01:24:4a:a2:b5:01:91:9b:ab:27:27:
9b:eb:b3:36:88:ef:86:bd:fc:b5:fa:12:17:9a:9c:
b0:2d:71:16:00:d1:8d:27:3c:13:b3:f5:e6:3d:99:
90:d8:ec:a0:fe:ff:b2:79:11:d7:ab:af:2e:bd:22:
ec:ec:48:ce:dc:12:19:5a:96:36:e9:16:56:22:cb:
46:25:c0:c7:ef:fb:2f:b4:9d:93:90:4a:2d:f8:12:
c6:36:58:63:e2:e7:08:86:87:50:ec:13:1e:b7:db:
4c:92:9c:8e:57:3d:5f:a8:3f:d7:85:75:43:f3:d3:
bb:20:c6:d9:8c:dc:ec:45:09:36:03:15:be:a8:d7:
5d:c3:47:57:52:c7:31:c9:61:c2:ab:58:51:45:41:
b1:c0:56:06:a0:db:e0:d2:66:35:90:13:30:b2:a0:
39:55:85:dd:5c:7e:a7:4f:e8:c3:e9:ad:4d:44:96:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:C7:2E:F4:EF:48:C2:F5:62:AE:DF:2B:53:80:70:62:9F:CA:2B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2ec30ed-974a-43a5-b46e-c1e08243cbdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
16:34:1c:b1:76:80:54:4d:0b:b5:83:f5:7e:8d:c7:d8:30:0e:
5a:ff:34:83:27:7f:3e:56:c8:e6:e6:41:c3:e0:f0:51:7f:91:
ae:9a:30:3f:d2:9e:33:2b:ec:1d:bd:1a:f2:ec:6a:5a:8c:d6:
9f:44:81:8b:da:90:50:b1:9c:52:cb:48:21:4e:4a:e9:86:07:
d5:87:fa:bc:bd:a9:ea:63:43:ef:1c:5b:af:d0:5f:f2:11:88:
0e:b0:a7:54:13:e4:26:e9:fb:04:d8:f1:8a:41:ed:dc:90:9c:
be:04:81:f6:a6:ab:9c:d8:96:c1:57:b0:ad:f6:80:8b:94:11:
69:6c:27:ea:dc:7c:12:93:93:1a:0b:ce:b1:01:49:30:a6:3e:
77:42:18:23:17:55:18:12:0c:0b:97:32:07:84:72:6f:02:e3:
f6:14:21:c9:ca:11:2e:63:b7:82:95:79:61:dc:cb:d3:41:80:
52:de:6c:62:0a:62:78:93:5b:dc:52:60:98:18:58:55:ff:88:
83:35:67:a5:c0:72:bc:65:f8:96:6f:b9:42:5f:8e:f6:f5:91:
a2:a1:c2:47:6d:81:35:ef:08:d1:46:cc:28:8a:fc:02:b9:82:
58:de:55:86:53:8f:86:d2:b3:9f:3d:66:bb:7b:92:66:6b:a5:
1b:13:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net