Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
File: a81c865a-a8b0-437e-b803-d35050fc3fea.roa (raw, json)
Hash identifier: m1TTw7J9YWGvrBYmkJEJ74Nj4Xwvn0PeDOtakxW6FoU=
Subject key identifier: AB:14:0E:AB:B5:92:9C:DE:73:C1:54:DE:C0:E6:1E:C4:9C:0E:85:10
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1517A6C02A531912334B09E531E59EC109D21A97
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:17:a6:c0:2a:53:19:12:33:4b:09:e5:31:e5:9e:c1:09:d2:1a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=1a78992b023dda3bf98f75db431d83e855cd17c3696e9c64bca999eb672976db, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:7a:20:82:9e:b9:e3:a2:d6:3c:fd:44:21:
5a:8f:44:45:dd:fa:98:20:4c:6b:ca:52:d9:ca:ef:
f8:66:b0:bc:9c:dd:2d:e2:fc:f2:55:73:d7:f9:b7:
a6:b4:28:22:52:00:1b:04:d0:ed:8b:4f:b8:34:71:
2c:6f:cf:72:85:01:d3:88:c6:99:9c:05:36:1b:e7:
8a:86:30:2d:8b:cb:a0:b3:d3:32:26:be:3d:8e:23:
28:be:75:1f:8b:41:36:fe:52:f7:5d:dc:8c:d4:91:
f5:2a:93:1f:bf:64:76:0e:a7:7f:e8:4e:f2:a3:59:
e8:97:8d:77:72:9c:c9:88:c5:d7:90:d8:cf:c9:9f:
d5:dc:fa:d1:4a:ec:33:1a:ee:e2:ee:13:13:a7:b3:
26:c0:76:45:95:be:c7:af:73:c2:2a:d0:3f:de:22:
39:17:fd:2b:19:27:2c:ed:57:79:93:d6:3d:c1:da:
75:d2:67:d6:3b:e5:21:3a:f4:8a:4e:3e:b3:81:90:
47:d1:17:dd:79:8e:ed:ce:68:03:c6:52:4d:c0:53:
8f:27:8a:53:03:9b:ae:eb:dc:0b:f5:a1:db:07:66:
3f:e4:3a:39:42:75:9c:7d:42:d9:65:2c:4f:38:30:
b8:94:e5:a4:0d:4b:64:d1:bf:a9:94:e5:68:1d:22:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:14:0E:AB:B5:92:9C:DE:73:C1:54:DE:C0:E6:1E:C4:9C:0E:85:10
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:f9:d7:56:c2:70:50:ae:e8:e7:0d:ea:9e:9c:1d:d1:6f:d2:
17:ae:0d:9d:c5:f8:49:bc:c6:23:bd:69:bf:27:20:5a:bc:c0:
b8:ba:80:8c:21:0e:3e:3f:76:f4:d3:ca:e1:0c:8c:ab:c2:a7:
a7:34:53:40:59:27:2b:96:b7:ac:b2:c6:55:a2:60:69:d6:8a:
17:02:3a:0a:fb:a1:1c:2e:d1:29:b8:4d:5f:17:45:5c:71:d6:
32:f7:2d:ef:c5:64:d8:dc:df:e0:8c:56:b6:e0:40:47:dc:1a:
51:5e:d9:1c:e3:dc:c4:a8:c7:50:7e:0a:32:6b:6d:c2:5f:4d:
74:06:a5:7f:f6:57:b1:7b:37:74:b8:11:f2:dd:10:23:05:95:
36:7f:0b:dd:ce:09:e7:8e:a6:6e:ef:f1:3e:0d:b2:7b:a6:5f:
96:41:bc:d2:9e:d4:40:e7:13:c7:41:18:16:54:cf:53:b1:69:
66:25:1b:f7:7a:15:57:b9:d4:c1:d4:01:44:5d:f1:7d:f2:60:
3d:95:12:cd:9e:05:cd:dd:0b:44:dd:e6:af:fa:f7:4b:42:bb:
2a:60:77:ae:ea:33:aa:f3:6b:bb:8e:d3:70:81:b7:b9:30:e1:
94:0b:25:30:fd:73:01:d0:bb:8d:f6:41:4f:0a:bf:93:a0:60:
6a:7e:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net